This is a note to let you know that I've just added the patch titled
Btrfs: fix double free in find_lock_delalloc_range
to the 3.10-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
btrfs-fix-double-free-in-find_lock_delalloc_range.patch
and it can be found in the queue-3.10 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From 7d78874273463a784759916fc3e0b4e2eb141c70 Mon Sep 17 00:00:00 2001
From: Chris Mason <clm@xxxxxx>
Date: Wed, 21 May 2014 05:49:54 -0700
Subject: Btrfs: fix double free in find_lock_delalloc_range
From: Chris Mason <clm@xxxxxx>
commit 7d78874273463a784759916fc3e0b4e2eb141c70 upstream.
We need to NULL the cached_state after freeing it, otherwise
we might free it again if find_delalloc_range doesn't find anything.
Signed-off-by: Chris Mason <clm@xxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
fs/btrfs/extent_io.c | 1 +
1 file changed, 1 insertion(+)
--- a/fs/btrfs/extent_io.c
+++ b/fs/btrfs/extent_io.c
@@ -1624,6 +1624,7 @@ again:
* shortening the size of the delalloc range we're searching
*/
free_extent_state(cached_state);
+ cached_state = NULL;
if (!loops) {
unsigned long offset = (*start) & (PAGE_CACHE_SIZE - 1);
max_bytes = PAGE_CACHE_SIZE - offset;
Patches currently in stable-queue which might be from clm@xxxxxx are
queue-3.10/btrfs-add-ctime-mtime-update-for-btrfs-device-add-remove.patch
queue-3.10/btrfs-fix-double-free-in-find_lock_delalloc_range.patch
queue-3.10/btrfs-fix-scrub_print_warning-to-handle-skinny-metadata-extents.patch
queue-3.10/btrfs-fix-use-of-uninit-ret-in-end_extent_writepage.patch
queue-3.10/fs-btrfs-volumes.c-fix-for-possible-null-pointer-dereference.patch
queue-3.10/btrfs-use-right-type-to-get-real-comparison.patch
queue-3.10/btrfs-set-right-total-device-count-for-seeding-support.patch
queue-3.10/btrfs-make-sure-there-are-not-any-read-requests-before-stopping-workers.patch
queue-3.10/btrfs-mark-mapping-with-error-flag-to-report-errors-to-userspace.patch
queue-3.10/btrfs-output-warning-instead-of-error-when-loading-free-space-cache-failed.patch
queue-3.10/btrfs-send-don-t-error-in-the-presence-of-subvols-snapshots.patch
--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html