Now when new refcount_t type and API are finally merged (see include/linux/refcount.h), the following patches convert various refcounters in the fuse filesystem from atomic_t to refcount_t. By doing this we prevent intentional or accidental underflows or overflows that can led to use-after-free vulnerabilities. The below patches are fully independent and can be cherry-picked separately. Since we convert all kernel subsystems in the same fashion, resulting in about 300 patches, we have to group them for sending at least in some fashion to be manageable. Please excuse the long cc list. These patches have been tested using tests supplied with libfuse. Not sure if this is the right way to test it. No output or failures with result to refcount conversions. refcount WARNs were on. Elena Reshetova (3): fs, fuse: convert fuse_file.count from atomic_t to refcount_t fs, fuse: convert fuse_req.count from atomic_t to refcount_t fs, fuse: convert fuse_conn.count from atomic_t to refcount_t fs/fuse/dev.c | 10 +++++----- fs/fuse/file.c | 8 ++++---- fs/fuse/fuse_i.h | 7 ++++--- fs/fuse/inode.c | 6 +++--- 4 files changed, 16 insertions(+), 15 deletions(-) -- 2.7.4
