David Howells 8a73c08e00 cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode ... commit c3d6569a43 upstream. cachefiles_ondemand_init_object() as called from cachefiles_open_file() and cachefiles_create_tmpfile() does not check if object->ondemand is set before dereferencing it, leading to an oops something like: RIP: 0010:cachefiles_ondemand_init_object+0x9/0x41 ... Call Trace: <TASK> cachefiles_open_file+0xc9/0x187 cachefiles_lookup_cookie+0x122/0x2be fscache_cookie_state_machine+0xbe/0x32b fscache_cookie_worker+0x1f/0x2d process_one_work+0x136/0x208 process_scheduled_works+0x3a/0x41 worker_thread+0x1a2/0x1f6 kthread+0xca/0xd2 ret_from_fork+0x21/0x33 Fix this by making cachefiles_ondemand_init_object() return immediately if cachefiles->ondemand is NULL. Fixes: 3c5ecfe16e ("cachefiles: extract ondemand info field from cachefiles_object") Reported-by: Marc Dionne <marc.dionne@auristor.com> Signed-off-by: David Howells <dhowells@redhat.com> cc: Gao Xiang <xiang@kernel.org> cc: Chao Yu <chao@kernel.org> cc: Yue Hu <huyue2@coolpad.com> cc: Jeffle Xu <jefflexu@linux.alibaba.com> cc: linux-erofs@lists.ozlabs.org cc: netfs@lists.linux.dev cc: linux-fsdevel@vger.kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-06-21 14:38:47 +02:00
..
9p	9p: add missing locking around taking dentry fid list	2024-06-16 13:47:37 +02:00
adfs
affs
afs	afs: Don't cross .backup mountpoint from backup volume	2024-06-16 13:47:30 +02:00
autofs
befs
bfs
btrfs	btrfs: zoned: fix use-after-free due to race with dev replace	2024-06-21 14:38:44 +02:00
cachefiles	cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode	2024-06-21 14:38:47 +02:00
ceph	ceph: redirty page before returning AOP_WRITEPAGE_ACTIVATE	2024-04-27 17:11:29 +02:00
coda
configfs
cramfs
crypto
debugfs
devpts
dlm	dlm: fix user space lock decision to copy lvb	2024-06-12 11:11:38 +02:00
ecryptfs	ecryptfs: Fix buffer size for tag 66 packet	2024-06-12 11:11:31 +02:00
efivarfs	efivarfs: Request at most 512 bytes for variable names	2024-03-06 14:48:41 +00:00
efs
erofs	erofs: avoid allocating DEFLATE streams before mounting	2024-06-16 13:47:31 +02:00
exfat
exportfs
ext2	quota: Properly annotate i_dquot arrays with __rcu	2024-03-26 18:19:46 -04:00
ext4	ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()	2024-06-16 13:47:45 +02:00
f2fs	f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()	2024-06-16 13:47:32 +02:00
fat	fat: fix uninitialized field in nostale filehandles	2024-04-03 15:28:20 +02:00
freevxfs
fscache	netfs, fscache: Prevent Oops in fscache_put_cache()	2024-01-31 16:19:01 -08:00
fuse	fuse: fix leaked ENOSYS error on first statx call	2024-04-27 17:11:42 +02:00
gfs2	kthread: add kthread_stop_put	2024-06-12 11:12:52 +02:00
hfs
hfsplus
hostfs
hpfs
hugetlbfs	mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE	2024-02-23 09:25:16 +01:00
iomap	iomap: fault in smaller chunks for non-large folio mappings	2024-06-16 13:47:40 +02:00
isofs	isofs: handle CDs with bad root inode but good Joliet root directory	2024-04-13 13:07:34 +02:00
jbd2
jffs2	jffs2: prevent xattr node from overflowing the eraseblock	2024-06-12 11:11:33 +02:00
jfs	jfs: xattr: fix buffer overflow for invalid xattr	2024-06-21 14:38:24 +02:00
kernfs	kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in kernfs_find_and_get_node_by_id()	2024-04-13 13:07:38 +02:00
lockd
minix
netfs
nfs	NFS: add barriers when testing for NFS_FSDATA_BLOCKED	2024-06-21 14:38:29 +02:00
nfs_common
nfsd	knfsd: LOOKUP can return an illegal error value	2024-06-21 14:38:40 +02:00
nilfs2	nilfs2: fix potential kernel bug due to lack of writeback flag waiting	2024-06-21 14:38:46 +02:00
nls
notify
ntfs
ntfs3	fs/ntfs3: Use variable length array instead of fixed size	2024-06-12 11:12:39 +02:00
ocfs2	ocfs2: fix races between hole punching and AIO+DIO	2024-06-21 14:38:41 +02:00
omfs
openpromfs	openpromfs: finish conversion to the new mount API	2024-06-12 11:11:30 +02:00
orangefs	Julia Lawall reported this null pointer dereference, this should fix it.	2024-04-13 13:07:35 +02:00
overlayfs	ovl: remove upper umask handling from ovl_create_upper()	2024-06-12 11:12:24 +02:00
proc	fs/proc: fix softlockup in __read_vmcore	2024-06-21 14:38:41 +02:00
pstore	pstore/zone: Add a null pointer check to the psz_kmsg_read	2024-04-13 13:07:31 +02:00
qnx4
qnx6
quota	quota: Properly annotate i_dquot arrays with __rcu	2024-03-26 18:19:46 -04:00
ramfs
reiserfs	quota: Properly annotate i_dquot arrays with __rcu	2024-03-26 18:19:46 -04:00
romfs
smb	ksmbd: fix missing use of get_write in in smb2_set_ea()	2024-06-21 14:38:36 +02:00
squashfs	Squashfs: check the inode number is not the invalid value of zero	2024-05-02 16:32:41 +02:00
sysfs	fs: sysfs: Fix reference leak in sysfs_break_active_protection()	2024-04-27 17:11:41 +02:00
sysv	sysv: don't call sb_bread() with pointers_lock held	2024-04-13 13:07:34 +02:00
tracefs	eventfs: Update all the eventfs_inodes from the events descriptor	2024-06-21 14:38:22 +02:00
ubifs	ubifs: Set page uptodate in the correct place	2024-04-03 15:28:20 +02:00
udf	udf: Convert udf_expand_file_adinicb() to use a folio	2024-06-12 11:12:23 +02:00
ufs
unicode
vboxsf	vboxsf: explicitly deny setlease attempts	2024-05-17 12:02:13 +02:00
verity	fsverity: use register_sysctl_init() to avoid kmemleak warning	2024-06-16 13:47:33 +02:00
xfs	xfs: allow cross-linking special files without project quota	2024-06-21 14:38:45 +02:00
zonefs	zonefs: Improve error handling	2024-02-23 09:25:13 +01:00
aio.c	fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion	2024-04-03 15:28:44 +02:00
anon_inodes.c
attr.c
bad_inode.c
binfmt_elf_fdpic.c
binfmt_elf_test.c
binfmt_elf.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c
buffer.c
char_dev.c
compat_binfmt_elf.c
coredump.c
d_path.c
dax.c
dcache.c	fast_dput(): handle underflows gracefully	2024-02-05 20:14:26 +00:00
direct-io.c
drop_caches.c
eventfd.c
eventpoll.c	epoll: be better about file lifetimes	2024-06-12 11:11:30 +02:00
exec.c	exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()	2024-04-03 15:28:55 +02:00
fcntl.c	fs: Fix rw_hint validation	2024-03-26 18:19:17 -04:00
fhandle.c	do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak	2024-03-26 18:19:15 -04:00
file_table.c
file.c
filesystems.c
fs_context.c
fs_parser.c
fs_pin.c
fs_struct.c
fs_types.c
fs-writeback.c
fsopen.c
init.c
inode.c
internal.h
ioctl.c
Kconfig
Kconfig.binfmt
kernel_read_file.c
libfs.c
locks.c
Makefile
mbcache.c
mnt_idmapping.c
mount.h
mpage.c
namei.c
namespace.c	fs: relax mount_setattr() permission checks	2024-02-23 09:25:15 +01:00
nsfs.c
open.c
pipe.c	fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()	2024-04-10 16:35:57 +02:00
pnode.c
pnode.h
posix_acl.c
proc_namespace.c
read_write.c
readdir.c
remap_range.c
select.c	fs/select: rework stack allocation hack for clang	2024-03-26 18:19:17 -04:00
seq_file.c
signalfd.c
splice.c
stack.c
stat.c
statfs.c
super.c
sync.c
sysctls.c
timerfd.c
userfaultfd.c	mm/userfaultfd: reset ptes when close() for wr-protected ones	2024-05-17 12:02:36 +02:00
utimes.c
xattr.c