The patch titled Subject: ocfs2: fix NULL pointer dereference in function ocfs2_abort_trigger() has been added to the -mm tree. Its filename is ocfs2-fix-null-pointer-dereference-in-function-ocfs2_abort_trigger.patch This patch should soon appear at http://ozlabs.org/~akpm/mmots/broken-out/ocfs2-fix-null-pointer-dereference-in-function-ocfs2_abort_trigger.patch and later at http://ozlabs.org/~akpm/mmotm/broken-out/ocfs2-fix-null-pointer-dereference-in-function-ocfs2_abort_trigger.patch Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/SubmitChecklist when testing your code *** The -mm tree is included into linux-next and is updated there every 3-4 working days ------------------------------------------------------ From: Xue jiufei <xuejiufei@xxxxxxxxxx> Subject: ocfs2: fix NULL pointer dereference in function ocfs2_abort_trigger() ocfs2_abort_trigger() use bh->b_assoc_map to get sb. But there's no function to set bh->b_assoc_map in ocfs2, it will trigger NULL pointer dereference while calling this function. We can get sb from bh->b_bdev->bd_super instead of b_assoc_map. Signed-off-by: joyce.xue <xuejiufei@xxxxxxxxxx> Cc: Joseph Qi <joseph.qi@xxxxxxxxxx> Cc: Mark Fasheh <mfasheh@xxxxxxxx> Cc: Joel Becker <jlbec@xxxxxxxxxxxx> Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> --- fs/ocfs2/journal.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff -puN fs/ocfs2/journal.c~ocfs2-fix-null-pointer-dereference-in-function-ocfs2_abort_trigger fs/ocfs2/journal.c --- a/fs/ocfs2/journal.c~ocfs2-fix-null-pointer-dereference-in-function-ocfs2_abort_trigger +++ a/fs/ocfs2/journal.c @@ -573,7 +573,7 @@ static void ocfs2_abort_trigger(struct j /* We aren't guaranteed to have the superblock here - but if we * don't, it'll just crash. */ - ocfs2_error(bh->b_assoc_map->host->i_sb, + ocfs2_error(bh->b_bdev->bd_super, "JBD2 has aborted our journal, ocfs2 cannot continue\n"); } _ Patches currently in -mm which might be from xuejiufei@xxxxxxxxxx are ocfs2-return-error-while-ocfs2_figure_merge_contig_type-failing.patch ocfs2-remove-bug_onempty_extent-in-__ocfs2_rotate_tree_left.patch ocfs2-do-not-bug-if-jbd2_journal_dirty_metadata-fails.patch ocfs2-fix-null-pointer-dereference-in-function-ocfs2_abort_trigger.patch ocfs2-fix-null-pointer-dereference-in-function-ocfs2_abort_trigger-fix.patch ocfs2-flush-inode-data-to-disk-and-free-inode-when-i_count-becomes-zero.patch ocfs2-extend-transaction-for-ocfs2_remove_rightmost_path-and-ocfs2_update_edge_lengths-before-to-avoid-inconsistency-between-inode-and-et.patch ocfs2-do-not-set-fs-read-only-if-rec-is-empty-while-committing-truncate.patch extend-enough-credits-for-freeing-one-truncate-record-while-replaying-truncate-records.patch -- To unsubscribe from this list: send the line "unsubscribe mm-commits" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html