Now when new refcount_t type and API are finally merged (see include/linux/refcount.h), the following patches convert various refcounters in the fs/xfs susystem from atomic_t to refcount_t. By doing this we prevent intentional or accidental underflows or overflows that can led to use-after-free vulnerabilities. The below patches are fully independent and can be cherry-picked separately. Since we convert all kernel subsystems in the same fashion, resulting in about 300 patches, we have to group them for sending at least in some fashion to be manageable. Please excuse the long cc list. Elena Reshetova (7): fs, xfs: convert xfs_bui_log_item.bui_refcount from atomic_t to refcount_t fs, xfs: convert xfs_buf.b_hold and xfs_buf.b_lru_ref from atomic_t to refcount_t fs, xfs: convert xfs_buf_log_item.bli_refcount from atomic_t to refcount_t fs, xfs: convert xfs_efi_log_item.efi_refcount from atomic_t to refcount_t fs, xfs: convert xlog_ticket.t_ref from atomic_t to refcount_t fs, xfs: convert xfs_cui_log_item.cui_refcount from atomic_t to refcount_t fs, xfs: convert xfs_rui_log_item.rui_refcount from atomic_t to refcount_t fs/xfs/xfs_bmap_item.c | 4 ++-- fs/xfs/xfs_bmap_item.h | 4 +++- fs/xfs/xfs_buf.c | 35 ++++++++++++++++++----------------- fs/xfs/xfs_buf.h | 7 ++++--- fs/xfs/xfs_buf_item.c | 16 ++++++++-------- fs/xfs/xfs_buf_item.h | 4 +++- fs/xfs/xfs_extfree_item.c | 4 ++-- fs/xfs/xfs_extfree_item.h | 4 +++- fs/xfs/xfs_log.c | 10 +++++----- fs/xfs/xfs_log_priv.h | 4 +++- fs/xfs/xfs_refcount_item.c | 4 ++-- fs/xfs/xfs_refcount_item.h | 4 +++- fs/xfs/xfs_rmap_item.c | 4 ++-- fs/xfs/xfs_rmap_item.h | 4 +++- fs/xfs/xfs_trace.h | 10 +++++----- fs/xfs/xfs_trans_buf.c | 32 ++++++++++++++++---------------- 16 files changed, 82 insertions(+), 68 deletions(-) -- 2.7.4 -- To unsubscribe from this list: send the line "unsubscribe linux-xfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html