iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/fs/btrfs
History
Zhang Xiaoxu 33eb72a6e1 btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() 
commit 9b2f20344d450137d015b380ff0c2e2a6a170135 upstream.

The btrfs_alloc_dummy_root() uses ERR_PTR as the error return value
rather than NULL, if error happened, there will be a NULL pointer
dereference:

  BUG: KASAN: null-ptr-deref in btrfs_free_dummy_root+0x21/0x50 [btrfs]
  Read of size 8 at addr 000000000000002c by task insmod/258926

  CPU: 2 PID: 258926 Comm: insmod Tainted: G        W          6.1.0-rc2+ #5
  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-1.fc33 04/01/2014
  Call Trace:
   <TASK>
   dump_stack_lvl+0x34/0x44
   kasan_report+0xb7/0x140
   kasan_check_range+0x145/0x1a0
   btrfs_free_dummy_root+0x21/0x50 [btrfs]
   btrfs_test_free_space_cache+0x1a8c/0x1add [btrfs]
   btrfs_run_sanity_tests+0x65/0x80 [btrfs]
   init_btrfs_fs+0xec/0x154 [btrfs]
   do_one_initcall+0x87/0x2a0
   do_init_module+0xdf/0x320
   load_module+0x3006/0x3390
   __do_sys_finit_module+0x113/0x1b0
   do_syscall_64+0x35/0x80
 entry_SYSCALL_64_after_hwframe+0x46/0xb0

Fixes: aaedb55bc08f ("Btrfs: add tests for btrfs_get_extent")
CC: stable@vger.kernel.org # 4.9+
Reviewed-by: Anand Jain <anand.jain@oracle.com>
Signed-off-by: Zhang Xiaoxu <zhangxiaoxu5@huawei.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-11-25 17:35:37 +01:00
..
tests
btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
2022-11-25 17:35:37 +01:00
acl.c
btrfs: preserve i_mode if __btrfs_set_acl() fails
2018-03-11 16:21:35 +01:00
async-thread.c
btrfs: fix memory ordering between normal and ordered work functions
2021-11-26 11:48:42 +01:00
async-thread.h
Btrfs: fix crash during unmount due to race with delayed inode workers
2020-04-24 07:59:00 +02:00
backref.c
btrfs: remove BUG_ON(!eie) in find_parent_nodes
2022-01-27 08:47:38 +01:00
backref.h
…
btrfs_inode.h
Btrfs: add a flags field to btrfs_fs_info
2016-09-26 17:59:49 +02:00
check-integrity.c
btrfs: convert printk(KERN_* to use pr_* calls
2016-09-26 18:08:44 +02:00
check-integrity.h
fs: have submit_bh users pass in op and flags separately
2016-06-07 13:41:38 -06:00
compression.c
btrfs: mark compressed range uptodate only if all bio succeed
2021-08-08 08:38:53 +02:00
compression.h
btrfs: move btrfs_compression_type to compression.h
2016-03-11 17:12:46 +01:00
ctree.c
btrfs: fix race when cloning extent buffer during rewind of an old root
2021-03-24 10:59:22 +01:00
ctree.h
btrfs: export helpers for subvolume name/id resolution
2020-08-26 10:29:03 +02:00
dedupe.h
btrfs: expand cow_file_range() to support in-band dedup and subpage-blocksize
2016-07-26 13:52:25 +02:00
delayed-inode.c
btrfs: abort transaction if we fail to update the delayed inode
2021-07-20 16:20:59 +02:00
delayed-inode.h
Btrfs: fix ->iterate_shared() by upgrading i_rwsem for delayed nodes
2016-06-25 06:20:10 -07:00
delayed-ref.c
Btrfs: fix race between adding and putting tree mod seq elements and nodes
2020-02-14 16:31:07 -05:00
delayed-ref.h
Btrfs: remove unused function btrfs_add_delayed_qgroup_reserve()
2016-08-03 11:02:51 +01:00
dev-replace.c
btrfs: Ensure replaced device doesn't have pending chunk allocation
2019-07-10 09:55:46 +02:00
dev-replace.h
btrfs: refactor btrfs_dev_replace_start for reuse
2016-04-28 10:59:13 +02:00
dir-item.c
btrfs: unsplit printed strings
2016-09-26 18:08:44 +02:00
disk-io.c
btrfs: reject log replay if there is unsupported RO compat flag
2022-08-25 11:09:27 +02:00
disk-io.h
Btrfs: fix memory leak of block group cache
2016-09-26 17:59:49 +02:00
export.c
btrfs: fix type of parameter generation in btrfs_get_dentry
2022-11-10 15:46:07 +01:00
export.h
btrfs: fix type of parameter generation in btrfs_get_dentry
2022-11-10 15:46:07 +01:00
extent_io.c
Btrfs: fix missing error return if writeback for extent buffer never started
2020-11-18 18:26:24 +01:00
extent_io.h
btrfs: fix potential deadlock in the search ioctl
2020-09-12 11:47:35 +02:00
extent_map.c
Btrfs: fix race between using extent maps and merging them
2020-02-28 15:42:12 +01:00
extent_map.h
btrfs: cleanup, stop casting for extent_map->lookup everywhere
2016-01-15 19:22:28 +01:00
extent-tree.c
btrfs: unlock newly allocated extent buffer after error
2022-03-16 12:49:01 +01:00
file-item.c
btrfs: fix error handling in btrfs_del_csums
2021-06-10 12:42:36 +02:00
file.c
btrfs: return value from btrfs_mark_extent_written() in case of error
2021-06-16 11:36:34 +02:00
free-space-cache.c
btrfs: clarify error returns values in __load_free_space_cache
2021-03-03 17:44:36 +01:00
free-space-cache.h
btrfs: convert pr_* to btrfs_* where possible
2016-09-26 19:37:04 +02:00
free-space-tree.c
Merge branch 'fst-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux into for-linus-4.9
2016-10-12 13:16:00 -07:00
free-space-tree.h
Btrfs: implement the free space B-tree
2015-12-17 12:16:47 -08:00
hash.c
crypto: Work around deallocated stack frame reference gcc bug on sparc.
2017-06-24 07:11:17 +02:00
hash.h
btrfs: advertise which crc32c implementation is being used at module load
2016-06-06 14:08:28 +02:00
inode-item.c
btrfs: rename btrfs_std_error to btrfs_handle_fs_error
2016-04-28 10:36:54 +02:00
inode-map.c
Btrfs: fix hang when loading existing inode cache off disk
2020-01-29 10:24:31 +01:00
inode-map.h
Btrfs: Initialize btrfs_root->highest_objectid when loading tree root and subvolume roots
2016-01-15 19:25:02 +01:00
inode.c
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
2021-09-22 11:42:57 +02:00
ioctl.c
btrfs: fix metadata extent leak after failure to create subvolume
2021-05-22 10:40:16 +02:00
Kconfig
btrfs: disable build on platforms having page size 256K
2021-07-20 16:20:59 +02:00
locking.c
btrfs: cleanup, remove stray return statements
2016-01-07 14:30:52 +01:00
locking.h
…
lzo.c
btrfs: convert printk(KERN_* to use pr_* calls
2016-09-26 18:08:44 +02:00
Makefile
btrfs: Move leaf and node validation checker to tree-checker.c
2018-12-08 13:05:11 +01:00
math.h
…
ordered-data.c
Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents
2020-02-28 15:42:53 +01:00
ordered-data.h
Btrfs: fix race setting block group readonly during device replace
2016-05-30 12:58:21 +01:00
orphan.c
…
print-tree.c
btrfs: convert printk(KERN_* to use pr_* calls
2016-09-26 18:08:44 +02:00
print-tree.h
…
props.c
btrfs: simpilify btrfs_subvol_inherit_props
2016-07-26 13:54:22 +02:00
props.h
…
qgroup.c
btrfs: quota: Set rescan progress to (u64)-1 if we hit last leaf
2020-12-29 13:45:04 +01:00
qgroup.h
btrfs: qgroup: Refactor btrfs_qgroup_insert_dirty_extent()
2016-08-25 03:58:21 -07:00
raid56.c
btrfs: fix raid6 qstripe kmap
2021-03-11 13:48:03 +01:00
raid56.h
…
rcu-string.h
…
reada.c
btrfs: fix use-after-free on readahead extent after failure to create it
2020-11-10 10:23:57 +01:00
relocation.c
btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
2021-05-22 10:40:17 +02:00
root-tree.c
Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path
2019-05-31 06:48:12 -07:00
scrub.c
btrfs: scrub: Don't use inode page cache in scrub_handle_errored_block()
2020-12-29 13:45:05 +01:00
send.c
btrfs: send: in case of IO error log it
2022-02-23 11:56:39 +01:00
send.h
Btrfs: use linux/sizes.h to represent constants
2016-01-07 14:38:02 +01:00
struct-funcs.c
btrfs: struct-funcs, constify readers
2018-12-08 13:05:12 +01:00
super.c
btrfs: don't show full path of bind mounts in subvol=
2020-08-26 10:29:03 +02:00
sysfs.c
btrfs: sysfs: don't leak memory when failing add fsid
2019-05-31 06:48:12 -07:00
sysfs.h
btrfs: sysfs: introduce helper for syncing bits with sysfs files
2016-01-21 18:50:40 +01:00
transaction.c
btrfs: clear defrag status of a root if starting transaction fails
2021-07-20 16:20:56 +02:00
transaction.h
btrfs: convert pr_* to btrfs_* where possible
2016-09-26 19:37:04 +02:00
tree-checker.c
btrfs: tree-checker: Fix misleading group system information
2018-12-08 13:05:13 +01:00
tree-checker.h
btrfs: tree-checker: Fix false panic for sanity test
2018-12-08 13:05:12 +01:00
tree-defrag.c
Btrfs: fix locking bugs when defragging leaves
2015-12-18 02:51:32 +00:00
tree-log.c
btrfs: fix lost error handling when looking up extended ref on log replay
2022-08-25 11:09:28 +02:00
tree-log.h
Btrfs: fix lockdep warning on deadlock against an inode's log mutex
2016-08-25 03:58:32 -07:00
ulist.c
btrfs: fix string and comment grammatical issues and typos
2016-05-25 22:35:14 +02:00
ulist.h
…
uuid-tree.c
btrfs: handle ENOENT in btrfs_uuid_tree_iterate
2020-01-04 13:38:57 +01:00
volumes.c
btrfs: sysfs: init devices outside of the chunk_mutex
2020-12-11 13:37:58 +01:00
volumes.h
btrfs: Remove btrfs_bio::flags member
2019-12-21 10:41:57 +01:00
xattr.c
btrfs: check if root is readonly while setting security xattr
2022-09-05 10:23:56 +02:00
xattr.h
btrfs: Switch to generic xattr handlers
2016-05-17 19:17:09 -04:00
zlib.c
btrfs: convert printk(KERN_* to use pr_* calls
2016-09-26 18:08:44 +02:00