Li RongQing 589506f1e7 libceph: fix a use after free issue in osdmap_set_max_osd ...

If the state variable is krealloced successfully, map->osd_state will be
freed, once following two reallocation failed, and exit the function
without resetting map->osd_state, map->osd_state become a wild pointer.

fix it by resetting them after krealloc successfully.

Signed-off-by: Li RongQing <roy.qing.li@gmail.com>
Signed-off-by: Ilya Dryomov <ilya.dryomov@inktank.com>

2014-10-14 21:03:21 +04:00

..

crush

crush: add SET_CHOOSELEAF_VARY_R step

2014-04-04 21:07:28 -07:00

armor.c

libceph: Fix base64-decoding when input ends in newline.

2011-03-15 09:14:02 -07:00

auth_none.c

libceph: Fix NULL pointer dereference in auth client code

2013-07-03 15:32:55 -07:00

auth_none.h

net: 8021q/bluetooth/bridge/can/ceph: Remove extern from function prototypes

2013-10-19 19:12:11 -04:00

auth_x_protocol.h

ceph: factor out libceph from Ceph file system

2010-10-20 15:37:28 -07:00

auth_x.c

libceph: do not hard code max auth ticket len

2014-09-10 20:08:36 +04:00

auth_x.h

net: 8021q/bluetooth/bridge/can/ceph: Remove extern from function prototypes

2013-10-19 19:12:11 -04:00

auth.c

libceph: wrap auth methods in a mutex

2013-05-01 21:17:15 -07:00

buffer.c

libceph: add ceph_kv{malloc,free}() and switch to them

2014-01-26 12:34:23 +02:00

ceph_common.c

libceph: mon_get_version request infrastructure

2014-06-06 09:29:57 +08:00

ceph_fs.c

ceph: fix file mode calculation

2011-07-19 11:25:04 -07:00

ceph_hash.c

net: cleanup unsigned to unsigned int

2012-04-15 12:44:40 -04:00

ceph_strings.c

libceph: update ceph_osd_op_name()

2013-02-18 12:20:18 -06:00

crypto.c

KEYS: Ceph: Use user_match()

2014-07-22 21:46:30 +01:00

crypto.h

net: 8021q/bluetooth/bridge/can/ceph: Remove extern from function prototypes

2013-10-19 19:12:11 -04:00

debugfs.c

libceph: mon_get_version request infrastructure

2014-06-06 09:29:57 +08:00

Kconfig

libceph: select CRYPTO_CBC in addition to CRYPTO_AES

2014-10-14 21:03:20 +04:00

Makefile

libceph: create source file "net/ceph/snapshot.c"

2013-05-01 21:20:08 -07:00

messenger.c

libceph: set last_piece in ceph_msg_data_pages_cursor_init() correctly

2014-08-09 11:27:32 +04:00

mon_client.c

libceph: gracefully handle large reply messages from the mon

2014-09-10 20:08:32 +04:00

msgpool.c

libceph: initialize msgpool message types

2012-07-30 09:29:50 -07:00

osd_client.c

libceph: resend lingering requests with a new tid

2014-10-14 21:03:19 +04:00

osdmap.c

libceph: fix a use after free issue in osdmap_set_max_osd

2014-10-14 21:03:21 +04:00

pagelist.c

ceph: use list_move_tail instead of list_del/list_add_tail

2012-10-01 14:30:49 -05:00

pagevec.c

ceph_sync_read: stop poking into iov_iter guts

2014-05-06 17:39:42 -04:00

snapshot.c

libceph: create source file "net/ceph/snapshot.c"

2013-05-01 21:20:08 -07:00