Darrick J. Wong 27fd5aad27 xfs: don't ever return a stale pointer from __xfs_dir3_free_read ... [ Upstream commit 1cb5deb5bc ] If we decide that a directory free block is corrupt, we must take care not to leak a buffer pointer to the caller. After xfs_trans_brelse returns, the buffer can be freed or reused, which means that we have to set *bpp back to NULL. Callers are supposed to notice the nonzero return value and not use the buffer pointer, but we should code more defensively, even if all current callers handle this situation correctly. Fixes: de14c5f541 ("xfs: verify free block header fields") Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com> Reviewed-by: Dave Chinner <dchinner@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-10-01 13:12:37 +02:00
..
libxfs	xfs: don't ever return a stale pointer from __xfs_dir3_free_read	2020-10-01 13:12:37 +02:00
Kconfig
kmem.c
kmem.h	xfs: map KM_MAYFAIL to __GFP_RETRY_MAYFAIL	2017-07-12 16:26:03 -07:00
Makefile
mrlock.h
xfs_acl.c	xfs: don't change inode mode if ACL update fails	2017-10-11 10:21:06 -07:00
xfs_acl.h	xfs: Don't clear SGID when inheriting ACLs	2017-06-27 18:23:21 -07:00
xfs_aops.c	xfs: ubsan fixes	2018-02-03 17:39:14 +01:00
xfs_aops.h	xfs: perform dax_device lookup at mount	2017-08-31 09:31:47 -07:00
xfs_attr_inactive.c	xfs: reinit btree pointer on attr tree inactivation walk	2017-10-11 10:21:07 -07:00
xfs_attr_list.c	xfs: assert locking precondіtion in xfs_attr_list_int_ilocked	2017-07-13 14:55:05 -07:00
xfs_attr.h	xfs: pass along transaction context when reading xattr block buffers	2017-06-20 10:45:22 -07:00
xfs_bmap_item.c	xfs: log recovery should replay deferred ops in order	2018-02-03 17:39:06 +01:00
xfs_bmap_item.h	xfs: log recovery should replay deferred ops in order	2018-02-03 17:39:06 +01:00
xfs_bmap_util.c	xfs: move more RT specific code under CONFIG_XFS_RT	2017-10-11 10:21:06 -07:00
xfs_bmap_util.h	xfs: move more RT specific code under CONFIG_XFS_RT	2017-10-11 10:21:06 -07:00
xfs_buf_item.c	xfs: fix compiler warnings	2017-09-02 08:22:19 -07:00
xfs_buf_item.h	xfs: remove unnecessary dirty bli format check for ordered bufs	2017-09-01 10:55:30 -07:00
xfs_buf.c	xfs: fix use-after-free race in xfs_buf_rele	2019-12-01 09:13:37 +01:00
xfs_buf.h	xfs: perform dax_device lookup at mount	2017-08-31 09:31:47 -07:00
xfs_dir2_readdir.c	xfs: pass along transaction context when reading directory block buffers	2017-06-20 10:45:22 -07:00
xfs_discard.c	Force log to disk before reading the AGF during a fstrim	2018-05-30 07:52:23 +02:00
xfs_discard.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfs_dquot_item.c	xfs: Properly retry failed dquot items in case of error during buffer writeback	2018-02-03 17:39:15 +01:00
xfs_dquot_item.h
xfs_dquot.c	xfs: Properly retry failed dquot items in case of error during buffer writeback	2018-02-03 17:39:15 +01:00
xfs_dquot.h
xfs_error.c	fs/xfs: Use %pS printk format for direct addresses	2017-09-25 18:22:30 -07:00
xfs_error.h	xfs: add log item pinning error injection tag	2017-08-22 09:22:24 -07:00
xfs_export.c
xfs_export.h
xfs_extent_busy.c
xfs_extent_busy.h
xfs_extfree_item.c
xfs_extfree_item.h
xfs_file.c	xfs: prevent creating negative-sized file via INSERT_RANGE	2018-05-09 09:51:52 +02:00
xfs_filestream.c
xfs_filestream.h
xfs_fsmap.c	xfs: move two more RT specific functions into CONFIG_XFS_RT	2017-10-16 12:26:50 -07:00
xfs_fsmap.h
xfs_fsops.c	xfs: convert XFS_AGFL_SIZE to a helper function	2018-06-05 11:41:55 +02:00
xfs_fsops.h	xfs: remove double-underscore integer types	2017-06-19 14:11:33 -07:00
xfs_globals.c
xfs_icache.c	xfs: validate cached inodes are free when allocated	2018-08-09 12:16:39 +02:00
xfs_icache.h	xfs: check if an inode is cached and allocated	2017-06-19 14:11:34 -07:00
xfs_icreate_item.c
xfs_icreate_item.h
xfs_inode_item.c	xfs: Don't log uninitialised fields in inode structures	2017-10-11 10:21:06 -07:00
xfs_inode_item.h
xfs_inode.c	xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT	2020-05-02 17:24:38 +02:00
xfs_inode.h	xfs: Switch to iomap for SEEK_HOLE / SEEK_DATA	2017-07-02 22:46:13 -07:00
xfs_ioctl.c	dax: change bdev_dax_supported() to support boolean returns	2018-07-11 16:29:22 +02:00
xfs_ioctl.h	xfs: remove double-underscore integer types	2017-06-19 14:11:33 -07:00
xfs_ioctl32.c	xfs: Fix bulkstat compat ioctls on x32 userspace.	2019-12-05 15:37:33 +01:00
xfs_ioctl32.h	xfs: remove double-underscore integer types	2017-06-19 14:11:33 -07:00
xfs_iomap.c	xfs: update i_size after unwritten conversion in dio completion	2017-09-26 10:55:19 -07:00
xfs_iomap.h	xfs: update i_size after unwritten conversion in dio completion	2017-09-26 10:55:19 -07:00
xfs_iops.c	xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT	2019-08-29 08:26:45 +02:00
xfs_iops.h
xfs_itable.c	xfs: export various function for the online scrubber	2017-06-19 14:11:34 -07:00
xfs_itable.h	xfs: export various function for the online scrubber	2017-06-19 14:11:34 -07:00
xfs_linux.h	xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present	2017-09-12 20:02:22 -07:00
xfs_log_cil.c	xfs: Fix leak of discard bio	2017-08-04 13:43:36 -07:00
xfs_log_priv.h	xfs: remove double-underscore integer types	2017-06-19 14:11:33 -07:00
xfs_log_recover.c	xfs: log recovery should replay deferred ops in order	2018-02-03 17:39:06 +01:00
xfs_log.c	xfs: fix missed wakeup on l_flush_wait	2020-08-05 10:06:50 +02:00
xfs_log.h	xfs: remove double-underscore integer types	2017-06-19 14:11:33 -07:00
xfs_message.c
xfs_message.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfs_mount.c	xfs: Fix bool initialization/comparison	2017-10-11 10:21:06 -07:00
xfs_mount.h	xfs: detect agfl count corruption and reset agfl	2018-06-05 11:41:55 +02:00
xfs_mru_cache.c
xfs_mru_cache.h
xfs_ondisk.h	xfs: Don't log uninitialised fields in inode structures	2017-10-11 10:21:06 -07:00
xfs_pnfs.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfs_pnfs.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfs_qm_bhv.c	xfs: remove double-underscore integer types	2017-06-19 14:11:33 -07:00
xfs_qm_syscalls.c
xfs_qm.c	xfs: quota: check result of register_shrinker()	2018-03-03 10:24:33 +01:00
xfs_qm.h
xfs_quota.h
xfs_quotaops.c	xfs: Sanity check flags of Q_XQUOTARM call	2020-01-27 14:46:02 +01:00
xfs_refcount_item.c	xfs: log recovery should replay deferred ops in order	2018-02-03 17:39:06 +01:00
xfs_refcount_item.h	xfs: log recovery should replay deferred ops in order	2018-02-03 17:39:06 +01:00
xfs_reflink.c	xfs: fix reflink quota reservation accounting error	2020-08-21 09:48:08 +02:00
xfs_reflink.h	xfs: separate function to check if inode shares extents	2017-06-19 14:11:35 -07:00
xfs_rmap_item.c
xfs_rmap_item.h
xfs_rtalloc.c	xfs: require both realtime inodes to mount	2019-12-05 15:37:18 +01:00
xfs_rtalloc.h	xfs: export various function for the online scrubber	2017-06-19 14:11:34 -07:00
xfs_stats.c	xfs: remove double-underscore integer types	2017-06-19 14:11:33 -07:00
xfs_stats.h	xfs: remove double-underscore integer types	2017-06-19 14:11:33 -07:00
xfs_super.c	xfs: clear sb->s_fs_info on mount failure	2019-10-17 13:44:03 -07:00
xfs_super.h
xfs_symlink.c	xfs: remove the ip argument to xfs_defer_finish	2017-09-01 10:55:30 -07:00
xfs_symlink.h	xfs: allow reading of already-locked remote symbolic link	2017-06-20 10:45:22 -07:00
xfs_sysctl.c
xfs_sysctl.h
xfs_sysfs.c	xfs: replace log_badcrc_factor knob with error injection tag	2017-06-27 18:23:21 -07:00
xfs_sysfs.h	xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init	2020-08-26 10:29:57 +02:00
xfs_trace.c
xfs_trace.h	xfs: detect agfl count corruption and reset agfl	2018-06-05 11:41:55 +02:00
xfs_trans_ail.c	xfs: add log item pinning error injection tag	2017-08-22 09:22:24 -07:00
xfs_trans_bmap.c
xfs_trans_buf.c	xfs: disallow marking previously dirty buffers as ordered	2017-09-01 10:55:30 -07:00
xfs_trans_dquot.c	xfs: fix inode quota reservation checks	2020-08-26 10:29:56 +02:00
xfs_trans_extfree.c
xfs_trans_inode.c	xfs: refactor xfs_trans_roll	2017-09-01 10:55:30 -07:00
xfs_trans_priv.h	xfs: Properly retry failed inode items in case of error during buffer writeback	2017-08-22 09:22:23 -07:00
xfs_trans_refcount.c
xfs_trans_rmap.c	xfs: remove double-underscore integer types	2017-06-19 14:11:33 -07:00
xfs_trans.c	xfs: refactor xfs_trans_roll	2017-09-01 10:55:30 -07:00
xfs_trans.h	xfs: disallow marking previously dirty buffers as ordered	2017-09-01 10:55:30 -07:00
xfs_xattr.c
xfs.h