Brian Foster d47137ce79 xfs: fix mount failure crash on invalid iclog memory access ... [ Upstream commit 798a9cada4694ca8d970259f216cec47e675bfd5 ] syzbot (via KASAN) reports a use-after-free in the error path of xlog_alloc_log(). Specifically, the iclog freeing loop doesn't handle the case of a fully initialized ->l_iclog linked list. Instead, it assumes that the list is partially constructed and NULL terminated. This bug manifested because there was no possible error scenario after iclog list setup when the original code was added. Subsequent code and associated error conditions were added some time later, while the original error handling code was never updated. Fix up the error loop to terminate either on a NULL iclog or reaching the end of the list. Reported-by: syzbot+c732f8644185de340492@syzkaller.appspotmail.com Signed-off-by: Brian Foster <bfoster@redhat.com> Reviewed-by: Darrick J. Wong <darrick.wong@oracle.com> Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-01-09 10:18:59 +01:00
..
9p	9p: avoid attaching writeback_fid on mmap with type PRIVATE	2019-10-11 18:21:13 +02:00
adfs	fs/adfs: super: fix use-after-free bug	2019-08-06 19:06:49 +02:00
affs
afs	afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP	2020-01-09 10:18:57 +01:00
autofs	autofs: fix a leak in autofs_expire_indirect()	2019-12-13 08:51:01 +01:00
befs
bfs
btrfs	btrfs: return error pointer from alloc_test_extent_buffer	2019-12-31 16:36:20 +01:00
cachefiles
ceph	ceph: return -EINVAL if given fsc mount option on kernel w/o support	2019-12-05 09:19:45 +01:00
cifs	CIFS: Close open handle after interrupted close	2019-12-21 10:57:35 +01:00
coda	coda: add error handling for fget	2019-08-06 19:06:51 +02:00
configfs	configfs: fix a deadlock in configfs_symlink()	2019-11-12 19:20:47 +01:00
cramfs
crypto
debugfs
devpts
dlm	dlm: fix invalid cluster name warning	2019-12-13 08:52:23 +01:00
ecryptfs	ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either	2019-11-20 18:45:18 +01:00
efivarfs
efs
exofs	exofs_mount(): fix leaks on failure exits	2019-12-05 09:20:32 +01:00
exportfs	exportfs_decode_fh(): negative pinned may become positive without the parent locked	2019-12-13 08:51:02 +01:00
ext2	ext2: check err when partial != NULL	2019-12-17 20:35:18 +01:00
ext4	ext4: iomap that extends beyond EOF should be marked dirty	2020-01-04 19:12:47 +01:00
f2fs	f2fs: fix to update dir's i_pino during cross_rename	2020-01-04 19:12:50 +01:00
fat	fat: work around race with userspace's read via blockdev while mounting	2019-10-07 18:57:14 +02:00
freevxfs
fscache
fuse	fuse: verify attributes	2019-12-13 08:52:36 +01:00
gfs2	gfs2: fix glock reference problem in gfs2_trans_remove_revoke	2019-12-17 20:35:55 +01:00
hfs	fs/hfs/extent.c: fix array out of bounds read of array extent	2019-12-01 09:17:10 +01:00
hfsplus	hfsplus: update timestamps on truncate()	2019-12-01 09:17:09 +01:00
hostfs
hpfs
hugetlbfs
isofs
jbd2	jbd2: Fix statistics for the number of logged blocks	2020-01-04 19:12:48 +01:00
jffs2
jfs
kernfs	kernfs: fix ino wrap-around detection	2019-12-13 08:52:43 +01:00
lockd	lockd: fix decoding of TEST results	2019-12-13 08:51:59 +01:00
minix
nfs	NFSv4.x: fix lock recovery during delegation recall	2019-11-24 08:20:24 +01:00
nfs_common
nfsd	nfsd: Return EPERM, not EACCES, in some SETATTR cases	2019-12-13 08:52:26 +01:00
nilfs2
nls
notify
ntfs
ocfs2	ocfs2: fix passing zero to 'PTR_ERR' warning	2020-01-04 19:13:16 +01:00
omfs
openpromfs
orangefs	orangefs: rate limit the client not running info message	2019-11-24 08:20:57 +01:00
overlayfs	ovl: relax WARN_ON() on rename to self	2019-12-17 20:34:51 +01:00
proc	mm, thp, proc: report THP eligibility for each vma	2019-12-17 20:35:45 +01:00
pstore	pstore/ram: Avoid NULL deref in ftrace merging failure path	2019-12-13 08:52:24 +01:00
qnx4
qnx6
quota	fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned long	2020-01-04 19:12:53 +01:00
ramfs
reiserfs	reiserfs: fix extended attributes on the root directory	2019-12-17 20:35:20 +01:00
romfs
squashfs
sysfs
sysv
tracefs
ubifs	ubifs: Fix default compression selection in ubifs	2019-12-05 09:20:09 +01:00
udf	udf: Fix crash during mount	2019-11-20 18:46:04 +01:00
ufs
xfs	xfs: fix mount failure crash on invalid iclog memory access	2020-01-09 10:18:59 +01:00
aio.c
anon_inodes.c
attr.c
bad_inode.c
binfmt_aout.c
binfmt_elf_fdpic.c
binfmt_elf.c	binfmt_elf: Do not move brk for INTERP-less ET_EXEC	2019-10-05 13:10:06 +02:00
binfmt_em86.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c	exec: load_script: Do not exec truncated interpreter path	2019-11-06 13:05:37 +01:00
block_dev.c
buffer.c
char_dev.c
compat_binfmt_elf.c
compat_ioctl.c	media: dvb: fix compat ioctl translation	2019-11-20 18:46:33 +01:00
compat.c
coredump.c
d_path.c
dax.c	dax: dax_layout_busy_page() should not unmap cow pages	2019-08-16 10:12:52 +02:00
dcache.c
dcookies.c
direct-io.c
drop_caches.c
eventfd.c
eventpoll.c
exec.c	sched/fair: Don't free p->numa_faults with concurrent readers	2019-08-04 09:30:56 +02:00
fcntl.c
fhandle.c
file_table.c
file.c
filesystems.c
fs_pin.c
fs_struct.c
fs-writeback.c	cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead	2019-11-12 19:21:20 +01:00
inode.c
internal.h
ioctl.c
iomap.c	iomap: partially revert 4721a601099 (simulated directio short read on EFAULT)	2019-12-13 08:52:56 +01:00
Kconfig
Kconfig.binfmt
libfs.c	Fix the locking in dcache_readdir() and friends	2019-10-17 13:45:35 -07:00
locks.c
Makefile
mbcache.c
mount.h
mpage.c
namei.c
namespace.c
no-block.c
nsfs.c
open.c
pipe.c
pnode.c
pnode.h
posix_acl.c
proc_namespace.c
read_write.c	vfs: avoid problematic remapping requests into partial EOF block	2019-12-01 09:17:04 +01:00
readdir.c	filldir[64]: remove WARN_ON_ONCE() for bad directory entries	2020-01-04 19:13:26 +01:00
select.c
seq_file.c	seq_file: fix problem when seeking mid-record	2019-08-25 10:47:43 +02:00
signalfd.c
splice.c	splice: only read in as much information as there is pipe buffer space	2019-12-17 20:35:43 +01:00
stack.c
stat.c
statfs.c	vfs: Fix EOVERFLOW testing in put_compat_statfs64	2019-10-11 18:21:39 +02:00
super.c
sync.c
timerfd.c
userfaultfd.c	userfaultfd: require CAP_SYS_PTRACE for UFFD_FEATURE_EVENT_FORK	2020-01-04 19:13:18 +01:00
utimes.c
xattr.c