This is a note to let you know that I've just added the patch titled ext4: update 'state->fc_regions_size' after successful memory allocation to the 5.15-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: ext4-update-state-fc_regions_size-after-successful-memory-allocation.patch and it can be found in the queue-5.15 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From 27cd49780381c6ccbf248798e5e8fd076200ffba Mon Sep 17 00:00:00 2001 From: Ye Bin <yebin10@xxxxxxxxxx> Date: Wed, 21 Sep 2022 14:40:40 +0800 Subject: ext4: update 'state->fc_regions_size' after successful memory allocation From: Ye Bin <yebin10@xxxxxxxxxx> commit 27cd49780381c6ccbf248798e5e8fd076200ffba upstream. To avoid to 'state->fc_regions_size' mismatch with 'state->fc_regions' when fail to reallocate 'fc_reqions',only update 'state->fc_regions_size' after 'state->fc_regions' is allocated successfully. Cc: stable@xxxxxxxxxx Signed-off-by: Ye Bin <yebin10@xxxxxxxxxx> Reviewed-by: Jan Kara <jack@xxxxxxx> Link: https://lore.kernel.org/r/20220921064040.3693255-4-yebin10@xxxxxxxxxx Signed-off-by: Theodore Ts'o <tytso@xxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- fs/ext4/fast_commit.c | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) --- a/fs/ext4/fast_commit.c +++ b/fs/ext4/fast_commit.c @@ -1609,14 +1609,15 @@ int ext4_fc_record_regions(struct super_ if (state->fc_regions_used == state->fc_regions_size) { struct ext4_fc_alloc_region *fc_regions; - state->fc_regions_size += - EXT4_FC_REPLAY_REALLOC_INCREMENT; fc_regions = krealloc(state->fc_regions, - state->fc_regions_size * - sizeof(struct ext4_fc_alloc_region), + sizeof(struct ext4_fc_alloc_region) * + (state->fc_regions_size + + EXT4_FC_REPLAY_REALLOC_INCREMENT), GFP_KERNEL); if (!fc_regions) return -ENOMEM; + state->fc_regions_size += + EXT4_FC_REPLAY_REALLOC_INCREMENT; state->fc_regions = fc_regions; } region = &state->fc_regions[state->fc_regions_used++]; Patches currently in stable-queue which might be from yebin10@xxxxxxxxxx are queue-5.15/ext4-update-state-fc_regions_size-after-successful-memory-allocation.patch queue-5.15/jbd2-fix-potential-buffer-head-reference-count-leak.patch queue-5.15/ext4-fix-miss-release-buffer-head-in-ext4_fc_write_inode.patch queue-5.15/jbd2-fix-potential-use-after-free-in-jbd2_fc_wait_bufs.patch queue-5.15/btrfs-fix-race-between-quota-enable-and-quota-rescan-ioctl.patch queue-5.15/ext4-fix-potential-memory-leak-in-ext4_fc_record_modified_inode.patch queue-5.15/ext4-fix-potential-memory-leak-in-ext4_fc_record_regions.patch queue-5.15/jbd2-add-miss-release-buffer-head-in-fc_do_one_pass.patch