iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e50476e9da270e1dfc742187aa1520ac4edb3a74
linux/fs/btrfs
History
Pan Bian e380f318e6 btrfs: relocation: set trans to be NULL after ending transaction 
commit 42a657f576 upstream.

The function relocate_block_group calls btrfs_end_transaction to release
trans when update_backref_cache returns 1, and then continues the loop
body. If btrfs_block_rsv_refill fails this time, it will jump out the
loop and the freed trans will be accessed. This may result in a
use-after-free bug. The patch assigns NULL to trans after trans is
released so that it will not be accessed.

Fixes: 0647bf564f ("Btrfs: improve forever loop when doing balance relocation")
CC: stable@vger.kernel.org # 4.4+
Reviewed-by: Qu Wenruo <wqu@suse.com>
Signed-off-by: Pan Bian <bianpan2016@163.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-12-05 19:41:23 +01:00
..
tests
btrfs: tests/qgroup: Fix wrong tree backref level
2018-05-30 07:52:26 +02:00
acl.c
btrfs: preserve i_mode if __btrfs_set_acl() fails
2017-08-21 17:47:42 +02:00
async-thread.c
btrfs: constify tracepoint arguments
2017-08-16 14:19:53 +02:00
async-thread.h
btrfs: constify tracepoint arguments
2017-08-16 14:19:53 +02:00
backref.c
btrfs: remove spurious WARN_ON(ref->count < 0) in find_parent_nodes
2018-03-21 12:06:44 +01:00
backref.h
btrfs: backref, add tracepoints for prelim_ref insertion and merging
2017-08-16 16:12:01 +02:00
btrfs_inode.h
btrfs: separate defrag and property compression
2017-08-16 16:12:05 +02:00
check-integrity.c
Merge branch 'for-4.14' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux
2017-09-09 13:27:51 -07:00
check-integrity.h
btrfs: take an fs_info directly when the root is not used otherwise
2016-12-06 16:06:59 +01:00
compression.c
Merge branch 'for-4.14-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux
2017-09-29 12:57:35 -07:00
compression.h
Merge branch 'zstd-minimal' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs
2017-09-14 17:30:49 -07:00
ctree.c
btrfs: fix reading stale metadata blocks after degraded raid1 mounts
2018-05-22 18:54:01 +02:00
ctree.h
btrfs: use kvzalloc to allocate btrfs_fs_info
2018-05-30 07:52:08 +02:00
dedupe.h
btrfs: expand cow_file_range() to support in-band dedup and subpage-blocksize
2016-07-26 13:52:25 +02:00
delayed-inode.c
Btrfs: fix stale entries in readdir
2018-01-31 14:03:42 +01:00
delayed-inode.h
btrfs: convert btrfs_delayed_item.refs from atomic_t to refcount_t
2017-04-18 14:07:23 +02:00
delayed-ref.c
Btrfs: return old and new total ref mods when adding delayed refs
2017-06-29 20:17:01 +02:00
delayed-ref.h
Btrfs: return old and new total ref mods when adding delayed refs
2017-06-29 20:17:01 +02:00
dev-replace.c
btrfs: replace: Reset on-disk dev stats value after replace
2018-09-15 09:45:32 +02:00
dev-replace.h
btrfs: constify device path passed to relevant helpers
2017-02-28 14:26:07 +01:00
dir-item.c
btrfs: fix validation of XATTR_ITEM dir items
2017-06-29 20:06:11 +02:00
disk-io.c
btrfs: tree-checker: Fix false panic for sanity test
2018-12-05 19:41:12 +01:00
disk-io.h
btrfs: use named constant for bdev blocksize
2017-08-16 16:12:04 +02:00
export.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
export.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
extent_io.c
Btrfs: fix file data corruption after cloning a range and fsync
2018-08-09 12:16:39 +02:00
extent_io.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
extent_map.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
extent_map.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
extent-tree.c
btrfs: Check that each block group has corresponding chunk at mount time
2018-12-05 19:41:12 +01:00
file-item.c
Merge branch 'for-4.13-part1' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux
2017-07-05 16:41:23 -07:00
file.c
btrfs: move the dio_sem higher up the callchain
2018-11-13 11:15:17 -08:00
free-space-cache.c
Btrfs: fix use-after-free when dumping free space
2018-11-13 11:15:18 -08:00
free-space-cache.h
btrfs: free-space-cache, clean up unnecessary root arguments
2017-02-17 12:03:56 +01:00
free-space-tree.c
btrfs: pass fs_info to btrfs_del_root instead of tree_root
2017-08-21 17:49:54 +02:00
free-space-tree.h
btrfs: expose internal free space tree routine only if sanity tests are enabled
2017-08-18 16:36:29 +02:00
hash.c
crypto: Work around deallocated stack frame reference gcc bug on sparc.
2017-06-08 17:36:03 +08:00
hash.h
btrfs: advertise which crc32c implementation is being used at module load
2016-06-06 14:08:28 +02:00
inode-item.c
btrfs: take an fs_info directly when the root is not used otherwise
2016-12-06 16:06:59 +01:00
inode-map.c
btrfs: qgroup: Introduce extent changeset for qgroup reserve functions
2017-06-29 20:17:02 +02:00
inode-map.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
inode.c
Btrfs: fix cur_offset in the error case for nocow
2018-11-21 09:24:10 +01:00
ioctl.c
Btrfs: fix data corruption due to cloning of eof block
2018-11-21 09:24:11 +01:00
Kconfig
btrfs: Add zstd support
2017-08-15 09:02:09 -07:00
locking.c
…
locking.h
…
lzo.c
btrfs: switch to kvmalloc and GFP_KERNEL in lzo/zlib alloc_workspace
2017-06-19 18:26:02 +02:00
Makefile
btrfs: Move leaf and node validation checker to tree-checker.c
2018-12-05 19:41:12 +01:00
math.h
…
ordered-data.c
btrfs: fix integer overflow in calc_reclaim_items_nr
2017-06-29 20:17:02 +02:00
ordered-data.h
btrfs: fix integer overflow in calc_reclaim_items_nr
2017-06-29 20:17:02 +02:00
orphan.c
…
print-tree.c
Btrfs: add one more sanity check for shared ref type
2017-08-21 17:47:43 +02:00
print-tree.h
btrfs: get fs_info from eb in btrfs_print_tree, remove argument
2017-08-16 16:12:03 +02:00
props.c
btrfs: property: Set incompat flag if lzo/zstd compression is set
2018-05-22 18:54:01 +02:00
props.h
…
qgroup.c
btrfs: qgroup: Dirty all qgroups before rescan
2018-11-13 11:15:14 -08:00
qgroup.h
btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled
2018-11-13 11:15:13 -08:00
raid56.c
Btrfs: make raid6 rebuild retry more
2018-06-21 04:03:02 +09:00
raid56.h
btrfs: take an fs_info directly when the root is not used otherwise
2016-12-06 16:06:59 +01:00
rcu-string.h
…
reada.c
btrfs: remove unused member err from reada_extent
2017-06-19 18:25:59 +02:00
relocation.c
btrfs: relocation: set trans to be NULL after ending transaction
2018-12-05 19:41:23 +01:00
root-tree.c
Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2017-09-14 18:54:01 -07:00
scrub.c
btrfs: scrub: Don't use inode page cache in scrub_handle_errored_block()
2018-08-24 13:09:18 +02:00
send.c
Btrfs: send, fix issuing write op when processing hole in no data mode
2018-05-30 07:52:09 +02:00
send.h
…
struct-funcs.c
btrfs: struct-funcs, constify readers
2017-08-16 14:19:53 +02:00
super.c
Btrfs: ensure path name is null terminated at btrfs_control_ioctl
2018-12-05 19:41:23 +01:00
sysfs.c
Revert "btrfs: use proper endianness accessors for super_copy"
2018-03-19 08:42:47 +01:00
sysfs.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
transaction.c
btrfs: don't run delayed_iputs in commit
2018-11-13 11:15:17 -08:00
transaction.h
btrfs: remove unused qgroup members from btrfs_trans_handle
2017-04-18 14:07:25 +02:00
tree-checker.c
btrfs: tree-checker: Fix misleading group system information
2018-12-05 19:41:13 +01:00
tree-checker.h
btrfs: tree-checker: Fix false panic for sanity test
2018-12-05 19:41:12 +01:00
tree-defrag.c
…
tree-log.c
Btrfs: fix fsync after hole punching when using no-holes feature
2018-11-13 11:15:18 -08:00
tree-log.h
btrfs: Make btrfs_del_inode_ref take btrfs_inode
2017-02-14 15:50:54 +01:00
ulist.c
btrfs: ulist: rename ulist_fini to ulist_release
2017-02-17 12:03:50 +01:00
ulist.h
btrfs: ulist: rename ulist_fini to ulist_release
2017-02-17 12:03:50 +01:00
uuid-tree.c
btrfs: return the actual error value from from btrfs_uuid_tree_iterate
2016-12-19 18:08:15 +01:00
volumes.c
btrfs: tree-checker: Verify block_group_item
2018-12-05 19:41:12 +01:00
volumes.h
btrfs: tree-checker: Verify block_group_item
2018-12-05 19:41:12 +01:00
xattr.c
btrfs: Check name_len with boundary in verify dir_item
2017-06-21 19:16:04 +02:00
xattr.h
btrfs: Switch to generic xattr handlers
2016-05-17 19:17:09 -04:00
zlib.c
btrfs: switch to kvmalloc and GFP_KERNEL in lzo/zlib alloc_workspace
2017-06-19 18:26:02 +02:00
zstd.c
btrfs: Add zstd support
2017-08-15 09:02:09 -07:00