iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/fs/ext4
History
Theodore Ts'o b663890d85 ext4: fix possible UAF when remounting r/o a mmp-protected file system 
commit 61bb4a1c417e5b95d9edb4f887f131de32e419cb upstream.

After commit 618f003199c6 ("ext4: fix memory leak in
ext4_fill_super"), after the file system is remounted read-only, there
is a race where the kmmpd thread can exit, causing sbi->s_mmp_tsk to
point at freed memory, which the call to ext4_stop_mmpd() can trip
over.

Fix this by only allowing kmmpd() to exit when it is stopped via
ext4_stop_mmpd().

Link: https://lore.kernel.org/r/20210707002433.3719773-1-tytso@mit.edu
Reported-by: Ye Bin <yebin10@huawei.com>
Bug-Report-Link: <20210629143603.2166962-1-yebin10@huawei.com>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Reviewed-by: Jan Kara <jack@suse.cz>
Cc: Tadeusz Struk <tadeusz.struk@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-11-02 19:48:18 +01:00
..
acl.c
ext4: main fast-commit commit path
2020-10-21 23:22:37 -04:00
acl.h
ext4: fix up remaining files with SPDX cleanups
2017-12-17 22:00:59 -05:00
balloc.c
ext4: shrink race window in ext4_should_retry_alloc()
2021-04-07 15:00:03 +02:00
bitmap.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
block_validity.c
ext4: rename system_blks to s_system_blks inside ext4_sb_info
2020-10-18 10:36:59 -04:00
dir.c
ext4: fix potential infinite loop in ext4_dx_readdir()
2021-10-06 15:56:02 +02:00
ext4_extents.h
ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max
2020-06-03 23:16:49 -04:00
ext4_jbd2.c
ext4: fast commit recovery path
2020-10-21 23:22:38 -04:00
ext4_jbd2.h
ext4: drop ext4_journal_free_reserved()
2020-06-03 23:16:53 -04:00
ext4.h
ext4: fix memory leak in ext4_fill_super
2021-07-19 09:45:03 +02:00
extents_status.c
ext4: remove check for zero nr_to_scan in ext4_es_scan()
2021-07-14 16:55:41 +02:00
extents_status.h
ext4: fix extent_status trace points
2020-01-25 02:03:03 -05:00
extents.c
ext4: add error checking to ext4_ext_replay_set_iblocks()
2021-10-06 15:56:01 +02:00
fast_commit.c
ext4: limit the number of blocks in one ADD_RANGE TLV
2021-10-06 15:56:01 +02:00
fast_commit.h
ext4: fix fast commit alignment issues
2021-06-10 13:39:26 +02:00
file.c
ext4: Fix occasional generic/418 failure
2021-05-11 14:47:38 +02:00
fsmap.c
treewide: Change list_sort to use const pointers
2021-09-30 10:11:04 +02:00
fsmap.h
ext4: fix up remaining files with SPDX cleanups
2017-12-17 22:00:59 -05:00
fsync.c
ext4: make s_mount_flags modifications atomic
2020-11-06 23:01:05 -05:00
hash.c
ext4: use generic casefolding support
2020-10-28 13:43:13 -04:00
ialloc.c
ext4: fix avefreec in find_group_orlov
2021-07-14 16:55:41 +02:00
indirect.c
ext4: use ext4_sb_bread() instead of sb_bread()
2020-10-18 10:37:14 -04:00
inline.c
ext4: correct the error path of ext4_write_inline_data_end()
2021-10-17 10:43:32 +02:00
inode-test.c
kunit: allow kunit tests to be loaded as a module
2020-01-09 16:42:29 -07:00
inode.c
ext4: correct the error path of ext4_write_inline_data_end()
2021-10-17 10:43:32 +02:00
ioctl.c
ext4: allow the dax flag to be set and cleared on inline directories
2021-05-11 14:47:38 +02:00
Kconfig
ext: EXT4_KUNIT_TESTS should depend on EXT4_FS instead of selecting it
2021-03-04 11:38:15 +01:00
Makefile
ext4 / jbd2: add fast commit initialization
2020-10-21 23:22:26 -04:00
mballoc.c
ext4: use ext4_grp_locked_error in mb_find_extent
2021-07-14 16:55:41 +02:00
mballoc.h
ext4: limit the length of per-inode prealloc list
2020-08-19 12:04:36 -04:00
migrate.c
ext4: handle ext4_mark_inode_dirty errors
2020-06-03 23:16:50 -04:00
mmp.c
ext4: fix possible UAF when remounting r/o a mmp-protected file system
2021-11-02 19:48:18 +01:00
move_extent.c
ext4: use common helpers in all places reading metadata buffers
2020-10-18 10:37:14 -04:00
namei.c
ext4: fix potential htree corruption when growing large_dir directories
2021-08-12 13:22:14 +02:00
page-io.c
ext4: add inline encryption support
2020-07-08 10:29:43 -07:00
readpage.c
Improvements to ext4's block allocator performance for very large file
2020-08-21 11:03:38 -07:00
resize.c
ext4: use ext4_sb_bread() instead of sb_bread()
2020-10-18 10:37:14 -04:00
super.c
ext4: fix possible UAF when remounting r/o a mmp-protected file system
2021-11-02 19:48:18 +01:00
symlink.c
ext4: report correct st_size for encrypted symlinks
2021-09-08 08:48:59 +02:00
sysfs.c
ext4: shrink race window in ext4_should_retry_alloc()
2021-04-07 15:00:03 +02:00
truncate.h
ext4: handle layout changes to pinned DAX mappings
2018-07-29 17:00:22 -04:00
verity.c
ext4: fix error handling in ext4_end_enable_verity()
2021-03-25 09:04:17 +01:00
xattr_hurd.c
ext4: support xattr gnu.* namespace for the Hurd
2020-06-12 13:23:34 -04:00
xattr_security.c
ext4: use XATTR_CREATE in ext4_initxattrs()
2018-05-10 11:52:14 -04:00
xattr_trusted.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xattr_user.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xattr.c
ext4: add reclaim checks to xattr code
2021-03-30 14:32:08 +02:00
xattr.h
ext4: support xattr gnu.* namespace for the Hurd
2020-06-12 13:23:34 -04:00