iMX/i2som-imx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
58fce20645303bee01d74144ec00e405be43b1ca
i2som-imx-linux/fs
History
Bharath Vedartham 5b0446c8e0 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie 
commit 962a991c5d upstream.

v9fs_cache_session_get_cookie assigns a random cachetag to v9ses->cachetag,
if the cachetag is not assigned previously.

v9fs_random_cachetag allocates memory to v9ses->cachetag with kmalloc and uses
scnprintf to fill it up with a cachetag.

But if scnprintf fails, v9ses->cachetag is not freed in the current
code causing a memory leak.

Fix this by freeing v9ses->cachetag it v9fs_random_cachetag fails.

This was reported by syzbot, the link to the report is below:
https://syzkaller.appspot.com/bug?id=f012bdf297a7a4c860c38a88b44fbee43fd9bbf3

Link: http://lkml.kernel.org/r/20190522194519.GA5313@bharath12345-Inspiron-5559
Reported-by: syzbot+3a030a73b6c1e9833815@syzkaller.appspotmail.com
Signed-off-by: Bharath Vedartham <linux.bhar@gmail.com>
Signed-off-by: Dominique Martinet <dominique.martinet@cea.fr>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-10-07 18:57:29 +02:00
..
9p
9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie
2019-10-07 18:57:29 +02:00
adfs
fs/adfs: super: fix use-after-free bug
2019-08-06 19:06:49 +02:00
affs
…
afs
afs: Fix leak in afs_lookup_cell_rcu()
2019-09-10 10:33:52 +01:00
autofs
autofs: fix error return in autofs_fill_super()
2019-03-13 14:02:32 -07:00
befs
…
bfs
…
btrfs
Btrfs: fix race setting up and completing qgroup rescan workers
2019-10-05 13:10:09 +02:00
cachefiles
…
ceph
ceph: use ceph_evict_inode to cleanup inode's resource
2019-10-05 13:10:02 +02:00
cifs
CIFS: Fix oplock handling for SMB 2.1+ protocols
2019-10-05 13:10:12 +02:00
coda
coda: add error handling for fget
2019-08-06 19:06:51 +02:00
configfs
configfs: Fix use-after-free when accessing sd->s_dentry
2019-06-22 08:15:17 +02:00
cramfs
…
crypto
fscrypt: clean up some BUG_ON()s in block encryption/decryption
2019-07-26 09:14:02 +02:00
debugfs
debugfs: fix use-after-free on symlink traversal
2019-05-08 07:21:48 +02:00
devpts
fs/devpts: always delete dcache dentry-s in dput()
2019-03-23 20:09:59 +01:00
dlm
dlm: check if workqueues are NULL before flushing/destroying
2019-07-31 07:27:07 +02:00
ecryptfs
eCryptfs: fix a couple type promotion bugs
2019-07-26 09:14:29 +02:00
efivarfs
…
efs
…
exofs
…
exportfs
…
ext2
ext2: Fix underflow in ext2_max_size()
2019-03-23 20:10:03 +01:00
ext4
ext4: fix potential use after free after remounting with noblock_validity
2019-10-07 18:57:05 +02:00
f2fs
f2fs: use generic EFSBADCRC/EFSCORRUPTED
2019-10-01 08:26:13 +02:00
fat
fat: work around race with userspace's read via blockdev while mounting
2019-10-07 18:57:14 +02:00
freevxfs
…
fscache
…
fuse
fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
2019-10-05 13:10:13 +02:00
gfs2
gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps
2019-10-05 13:10:07 +02:00
hfs
…
hfsplus
…
hostfs
…
hpfs
…
hugetlbfs
hugetlb: use same fault hash key for shared and private mappings
2019-05-22 07:37:40 +02:00
isofs
…
jbd2
jbd2: introduce jbd2_inode dirty range scoping
2019-07-28 08:29:29 +02:00
jffs2
jffs2: fix use-after-free on symlink traversal
2019-05-08 07:21:48 +02:00
jfs
…
kernfs
kernfs: fix barrier usage in __kernfs_new_node()
2019-05-16 19:41:18 +02:00
lockd
Revert "lockd: Show pid of lockd for remote locks"
2019-06-09 09:17:22 +02:00
minix
…
nfs
NFSv2: Fix write regression
2019-09-21 07:17:02 +02:00
nfs_common
…
nfsd
nfsd: Fix overflow causing non-working mounts on 1 TB machines
2019-07-10 09:53:47 +02:00
nilfs2
…
nls
…
notify
memcg, fsnotify: no oom-kill for remote memcg charging
2019-07-31 07:27:08 +02:00
ntfs
…
ocfs2
ocfs2: wait for recovering done after direct unlock request
2019-10-07 18:57:16 +02:00
omfs
…
openpromfs
…
orangefs
…
overlayfs
ovl: filter of trusted xattr results in audit
2019-10-05 13:10:08 +02:00
proc
/proc/<pid>/cmdline: add back the setproctitle() special case
2019-08-04 09:30:56 +02:00
pstore
pstore: fs superblock limits
2019-10-07 18:56:59 +02:00
qnx4
…
qnx6
…
quota
quota: fix a problem about transfer quota
2019-07-14 08:11:15 +02:00
ramfs
…
reiserfs
…
romfs
…
squashfs
…
sysfs
…
sysv
…
tracefs
…
ubifs
ubifs: Correctly use tnc_next() in search_dh_cookie()
2019-09-19 09:09:37 +02:00
udf
udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
2019-07-14 08:11:16 +02:00
ufs
ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
2019-05-25 18:23:46 +02:00
xfs
xfs: don't crash on null attr fork xfs_bmapi_read
2019-10-01 08:26:12 +02:00
aio.c
Fix aio_poll() races
2019-05-02 09:58:59 +02:00
anon_inodes.c
…
attr.c
…
bad_inode.c
…
binfmt_aout.c
…
binfmt_elf_fdpic.c
…
binfmt_elf.c
binfmt_elf: Do not move brk for INTERP-less ET_EXEC
2019-10-05 13:10:06 +02:00
binfmt_em86.c
…
binfmt_flat.c
fs/binfmt_flat.c: make load_flat_shared_library() work
2019-07-03 13:14:44 +02:00
binfmt_misc.c
…
binfmt_script.c
Revert "exec: load_script: don't blindly truncate shebang string"
2019-02-15 09:09:54 +01:00
block_dev.c
block: fix the return errno for direct IO
2019-04-17 08:38:52 +02:00
buffer.c
fs: fix guard_bio_eod to check for real EOD errors
2019-04-05 22:33:00 +02:00
char_dev.c
chardev: add additional check for minor range overlap
2019-05-31 06:46:27 -07:00
compat_binfmt_elf.c
…
compat_ioctl.c
compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
2019-08-09 17:52:34 +02:00
compat.c
…
coredump.c
…
d_path.c
…
dax.c
dax: dax_layout_busy_page() should not unmap cow pages
2019-08-16 10:12:52 +02:00
dcache.c
dcache: sort the freeing-without-RCU-delay mess for good.
2019-05-25 18:23:26 +02:00
dcookies.c
…
direct-io.c
direct-io: allow direct writes to empty inodes
2019-03-05 17:58:50 +01:00
drop_caches.c
fs/drop_caches.c: avoid softlockups in drop_pagecache_sb()
2019-03-13 14:02:32 -07:00
eventfd.c
…
eventpoll.c
fs/epoll: drop ovflist branch prediction
2019-02-12 19:47:19 +01:00
exec.c
sched/fair: Don't free p->numa_faults with concurrent readers
2019-08-04 09:30:56 +02:00
fcntl.c
…
fhandle.c
…
file_table.c
…
file.c
fs/file.c: initialize init_files.resize_wait
2019-04-05 22:32:59 +02:00
filesystems.c
…
fs_pin.c
…
fs_struct.c
…
fs-writeback.c
blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership arbitration
2019-07-26 09:14:08 +02:00
inode.c
Abort file_remove_privs() for non-reg. files
2019-06-22 08:15:21 +02:00
internal.h
acct_on(): don't mess with freeze protection
2019-05-31 06:46:05 -07:00
ioctl.c
…
iomap.c
iomap: fix a use after free in iomap_dio_rw
2019-03-13 14:02:29 -07:00
Kconfig
…
Kconfig.binfmt
…
libfs.c
…
locks.c
…
Makefile
…
mbcache.c
…
mount.h
…
mpage.c
…
namei.c
…
namespace.c
…
no-block.c
…
nsfs.c
dcache: sort the freeing-without-RCU-delay mess for good.
2019-05-25 18:23:26 +02:00
open.c
access: avoid the RCU grace period for the temporary subjective credentials
2019-07-31 07:27:11 +02:00
pipe.c
fs: prevent page refcount overflow in pipe_buf_get
2019-05-04 09:20:11 +02:00
pnode.c
…
pnode.h
…
posix_acl.c
…
proc_namespace.c
…
read_write.c
vfs: fix page locking deadlocks when deduping files
2019-09-10 10:33:47 +01:00
readdir.c
…
select.c
…
seq_file.c
seq_file: fix problem when seeking mid-record
2019-08-25 10:47:43 +02:00
signalfd.c
…
splice.c
fs: prevent page refcount overflow in pipe_buf_get
2019-05-04 09:20:11 +02:00
stack.c
…
stat.c
…
statfs.c
…
super.c
…
sync.c
…
timerfd.c
…
userfaultfd.c
userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx
2019-08-29 08:28:52 +02:00
utimes.c
…
xattr.c
…