FEX-Emu/linux
1
0
Fork 0
mirror of https://github.com/FEX-Emu/linux.git synced 2025-02-05 18:57:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
linux/fs
History
Eric Paris e08733446e inotify: race use after free/double free in inotify inode marks 
There is a race in the inotify add/rm watch code.  A task can find and
remove a mark which doesn't have all of it's references.  This can
result in a use after free/double free situation.

Task A					Task B
------------				-----------
inotify_new_watch()
 allocate a mark (refcnt == 1)
 add it to the idr
					inotify_rm_watch()
					 inotify_remove_from_idr()
					  fsnotify_put_mark()
					      refcnt hits 0, free
 take reference because we are on idr
 [at this point it is a use after free]
 [time goes on]
 refcnt may hit 0 again, double free

The fix is to take the reference BEFORE the object can be found in the
idr.

Signed-off-by: Eric Paris <eparis@redhat.com>
Cc: <stable@kernel.org>
2010-05-14 11:52:57 -04:00
..
9p
9p: add bdi backing to mount session
2010-04-22 11:42:00 +02:00
adfs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
affs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
afs
Merge branch 'for-linus' of git://git.kernel.dk/linux-2.6-block
2010-04-28 07:56:05 -07:00
autofs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
autofs4
autofs4-2.6.34-rc1 - fix link_count usage
2010-05-10 09:48:10 -07:00
befs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
bfs
pass writeback_control to ->write_inode
2010-03-05 13:25:52 -05:00
btrfs
btrfs: convert to using bdi_setup_and_register()
2010-04-26 10:27:54 +02:00
cachefiles
CacheFiles: Fix occasional EIO on call to vfs_unlink()
2010-05-11 10:07:53 -07:00
ceph
ceph: remove bad auth_x kmem_cache
2010-05-03 10:49:25 -07:00
cifs
cifs: add bdi backing to mount session
2010-04-22 12:09:48 +02:00
coda
coda: add bdi backing to mount session
2010-04-22 12:12:40 +02:00
configfs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
cramfs
…
debugfs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
devpts
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
dlm
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
ecryptfs
ecryptfs: add bdi backing to mount session
2010-04-22 12:22:04 +02:00
efs
…
exofs
exofs: Fix "add bdi backing to mount session" fall out
2010-04-29 20:35:29 +02:00
exportfs
…
ext2
ext2: symlink must be handled via filesystem specific operation
2010-04-12 21:11:25 +02:00
ext3
ext3: symlink must be handled via filesystem specific operation
2010-04-12 21:11:39 +02:00
ext4
Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4
2010-04-25 10:01:51 -07:00
fat
Merge branch 'master' into export-slabh
2010-04-05 11:37:28 +09:00
freevxfs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
fscache
fs-cache: order the debugfs stats correctly
2010-04-07 08:38:05 -07:00
fuse
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
gfs2
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
hfs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
hfsplus
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
hostfs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
hpfs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
hppfs
hppfs can use existing proc_mnt, no need for do_kern_mount() in there
2010-03-03 14:08:00 -05:00
hugetlbfs
Untangling ima mess, part 1: alloc_file()
2009-12-16 12:16:47 -05:00
isofs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
jbd
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
jbd2
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
jffs2
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
jfs
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/shaggy/jfs-2.6
2010-04-21 12:30:07 -07:00
lockd
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
logfs
Merge git://git.kernel.org/pub/scm/linux/kernel/git/joern/logfs
2010-04-21 12:31:12 -07:00
minix
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
ncpfs
ncpfs: add bdi backing to mount session
2010-04-22 12:31:11 +02:00
nfs
NFS: Fix RCU issues in the NFSv4 delegation code
2010-05-01 12:37:18 -04:00
nfs_common
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
nfsd
nfsd4: bug in read_buf
2010-04-26 15:39:08 -04:00
nilfs2
nilfs2: fix sync silent failure
2010-05-03 07:36:01 -07:00
nls
…
notify
inotify: race use after free/double free in inotify inode marks
2010-05-14 11:52:57 -04:00
ntfs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
ocfs2
ocfs2: Avoid a gcc warning in ocfs2_wipe_inode().
2010-05-03 19:15:49 -07:00
omfs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
openpromfs
…
partitions
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
proc
revert "procfs: provide stack information for threads" and its fixup commits
2010-05-11 17:33:41 -07:00
qnx4
fs/qnx4: decrement sizeof size in strncmp
2010-02-04 11:55:46 +01:00
quota
quota: Convert __DQUOT_PARANOIA symbol to standard config option
2010-04-20 18:25:25 +02:00
ramfs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
reiserfs
reiserfs: fix corruption during shrinking of xattrs
2010-04-24 11:31:24 -07:00
romfs
fix leak in romfs_fill_super()
2010-01-26 22:22:26 -05:00
smbfs
smbfs: add bdi backing to mount session
2010-04-22 12:37:07 +02:00
squashfs
squashfs: fix potential buffer over-run on 4K block file systems
2010-04-25 02:09:05 +01:00
sysfs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
sysv
pass writeback_control to ->write_inode
2010-03-05 13:25:52 -05:00
ubifs
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
udf
udf: add speciffic ->setattr callback
2010-04-08 15:35:20 +02:00
ufs
ufs: make solaris fsck happy
2010-03-12 15:52:35 -08:00
xfs
xfs: add a shrinker to background inode reclaim
2010-04-29 16:22:13 -05:00
aio.c
aio: remove unused field
2009-12-16 07:20:13 -08:00
anon_inodes.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
attr.c
fs: use rlimit helpers
2010-03-06 11:26:29 -08:00
bad_inode.c
…
binfmt_aout.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
binfmt_elf_fdpic.c
Remove redundant check for CONFIG_MMU
2010-04-27 09:01:26 -07:00
binfmt_elf.c
coredump: pass mm->flags as a coredump parameter for consistency
2010-03-06 11:26:46 -08:00
binfmt_em86.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
binfmt_flat.c
uclinux: error message when FLAT reloc symbol is invalid, v2
2010-04-21 13:28:49 +10:00
binfmt_misc.c
…
binfmt_script.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
binfmt_som.c
Split 'flush_old_exec' into two functions
2010-01-29 08:22:01 -08:00
bio-integrity.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
bio.c
Merge branch 'master' into for-linus
2010-03-19 08:05:10 +01:00
block_dev.c
fs/block_dev.c: fix performance regression in O_DIRECT|O_SYNC writes to block devices
2010-04-24 11:31:26 -07:00
buffer.c
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial
2010-03-12 16:04:50 -08:00
char_dev.c
…
compat_binfmt_elf.c
elf coredump: replace ELF_CORE_EXTRA_* macros by functions
2010-03-06 11:26:45 -08:00
compat_ioctl.c
pktcdvd: improve BKL and compat_ioctl.c usage
2010-04-29 08:44:37 -07:00
compat.c
revert "procfs: provide stack information for threads" and its fixup commits
2010-05-11 17:33:41 -07:00
dcache.c
fix race in d_splice_alias()
2010-03-03 14:13:08 -05:00
dcookies.c
…
direct-io.c
dio: fix use-after-free
2009-12-17 04:52:13 -05:00
drop_caches.c
…
eventfd.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
eventpoll.c
anonfd: Allow making anon files read-only
2009-12-22 12:27:34 -05:00
exec.c
revert "procfs: provide stack information for threads" and its fixup commits
2010-05-11 17:33:41 -07:00
fcntl.c
fs: use rlimit helpers
2010-03-06 11:26:29 -08:00
fifo.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
file_table.c
vfs: take f_lock on modifying f_mode after open time
2010-03-06 11:26:25 -08:00
file.c
fs: use rlimit helpers
2010-03-06 11:26:29 -08:00
filesystems.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
fs_struct.c
…
fs-writeback.c
Merge branch 'for-linus' of git://git.kernel.dk/linux-2.6-block
2010-04-09 11:50:29 -07:00
generic_acl.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
inode.c
dquot: move dquot initialization responsibility into the filesystem
2010-03-05 00:20:30 +01:00
internal.h
Take vfsmount_lock to fs/internal.h
2010-03-03 14:07:59 -05:00
ioctl.c
Cleanup generic block based fiemap
2010-04-23 10:39:48 -07:00
ioprio.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
Kconfig
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client
2010-03-19 09:43:06 -07:00
Kconfig.binfmt
…
libfs.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
locks.c
Merge branch 'for-next' into for-linus
2010-03-08 16:55:37 +01:00
Makefile
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client
2010-03-19 09:43:06 -07:00
mbcache.c
…
mpage.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
namei.c
Restore LOOKUP_DIRECTORY hint handling in final lookup on open()
2010-03-26 12:41:05 -04:00
namespace.c
vfs: add NOFOLLOW flag to umount(2)
2010-03-03 14:08:00 -05:00
nfsctl.c
Switch may_open() and break_lease() to passing O_...
2010-03-03 13:00:21 -05:00
no-block.c
…
open.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
pipe.c
fs: no games with DCACHE_UNHASHED
2009-12-17 10:51:40 -05:00
pnode.c
Kill CL_PROPAGATION, sanitize fs/pnode.c:get_source()
2010-03-03 13:00:22 -05:00
pnode.h
VFS: Clean up shared mount flag propagation
2010-03-03 14:07:55 -05:00
posix_acl.c
…
read_write.c
do_sync_read/write() should set kiocb.ki_nbytes to be consistent
2010-03-24 16:43:29 -07:00
read_write.h
…
readdir.c
…
select.c
Add generic sys_old_select()
2010-03-12 15:52:32 -08:00
seq_file.c
seq_file: fix new kernel-doc warnings
2010-03-07 15:48:26 -08:00
signalfd.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
splice.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
stack.c
VFS/fsstack: handle 32-bit smp + preempt + large files in fsstack_copy_inode_size
2009-12-17 10:58:17 -05:00
stat.c
Add unlocked version of inode_add_bytes() function
2009-12-23 13:33:54 +01:00
super.c
fs: fs/super.c needs to include backing-dev.h for !CONFIG_BLOCK
2010-04-29 20:33:35 +02:00
sync.c
Catch filesystems lacking s_bdi
2010-04-25 08:54:42 +02:00
timerfd.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
utimes.c
…
xattr_acl.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
xattr.c
sanitize xattr handler prototypes
2009-12-16 12:16:49 -05:00