This is a note to let you know that I've just added the patch titled
[PATCH] Revert "bsg-lib: don't free job in bsg_prepare_job"
to the 3.18-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
revert-bsg-lib-don-t-free-job-in-bsg_prepare_job.patch
and it can be found in the queue-3.18 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From 42fbb07e2e3a338154ee747bf28dc688bc599b81 Mon Sep 17 00:00:00 2001
From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Date: Thu, 19 Oct 2017 14:55:29 +0200
Subject: [PATCH] Revert "bsg-lib: don't free job in bsg_prepare_job"
This reverts commit d9100405a20a71dd620843e0380e38fc50731108 which was
commit f507b54dccfd8000c517d740bc45f20c74532d18 upstream.
Ben reports:
That function doesn't exist here (it was introduced in 4.13).
Instead, this backport has modified bsg_create_job(), creating a
leak. Please revert this on the 3.18, 4.4 and 4.9 stable
branches.
So I'm dropping it from here.
Reported-by: Ben Hutchings <ben.hutchings@xxxxxxxxxxxxxxx>
Cc: Christoph Hellwig <hch@xxxxxx>
Cc: Ming Lei <ming.lei@xxxxxxxxxx>
Cc: Jens Axboe <axboe@xxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman gregkh@xxxxxxxxxxxxxxxxxxx
---
block/bsg-lib.c | 1 +
1 file changed, 1 insertion(+)
--- a/block/bsg-lib.c
+++ b/block/bsg-lib.c
@@ -147,6 +147,7 @@ static int bsg_create_job(struct device
failjob_rls_rqst_payload:
kfree(job->request_payload.sg_list);
failjob_rls_job:
+ kfree(job);
return -ENOMEM;
}
Patches currently in stable-queue which might be from gregkh@xxxxxxxxxxxxxxxxxxx are
queue-3.18/packet-in-packet_do_bind-test-fanout-with-bind_lock-held.patch
queue-3.18/isdn-i4l-fetch-the-ppp_write-buffer-in-one-shot.patch
queue-3.18/x86-mm-disable-preemption-during-cr3-read-write.patch
queue-3.18/ext4-avoid-deadlock-when-expanding-inode-size.patch
queue-3.18/l2tp-fix-race-condition-in-l2tp_tunnel_delete.patch
queue-3.18/vti-fix-use-after-free-in-vti_tunnel_xmit-vti6_tnl_xmit.patch
queue-3.18/revert-bsg-lib-don-t-free-job-in-bsg_prepare_job.patch
queue-3.18/sctp-potential-read-out-of-bounds-in-sctp_ulpevent_type_enabled.patch
queue-3.18/drm-dp-mst-save-vcpi-with-payloads.patch
queue-3.18/l2tp-avoid-schedule-while-atomic-in-exit_net.patch
queue-3.18/bpf-verifier-reject-bpf_alu64-bpf_end.patch
queue-3.18/net-set-sk_prot_creator-when-cloning-sockets-to-the-right-proto.patch
queue-3.18/packet-hold-bind-lock-when-rebinding-to-fanout-hook.patch