This is a note to let you know that I've just added the patch titled
Btrfs: fix double free in find_lock_delalloc_range
to the 3.14-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
btrfs-fix-double-free-in-find_lock_delalloc_range.patch
and it can be found in the queue-3.14 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From 7d78874273463a784759916fc3e0b4e2eb141c70 Mon Sep 17 00:00:00 2001
From: Chris Mason <clm@xxxxxx>
Date: Wed, 21 May 2014 05:49:54 -0700
Subject: Btrfs: fix double free in find_lock_delalloc_range
From: Chris Mason <clm@xxxxxx>
commit 7d78874273463a784759916fc3e0b4e2eb141c70 upstream.
We need to NULL the cached_state after freeing it, otherwise
we might free it again if find_delalloc_range doesn't find anything.
Signed-off-by: Chris Mason <clm@xxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
fs/btrfs/extent_io.c | 1 +
1 file changed, 1 insertion(+)
--- a/fs/btrfs/extent_io.c
+++ b/fs/btrfs/extent_io.c
@@ -1686,6 +1686,7 @@ again:
* shortening the size of the delalloc range we're searching
*/
free_extent_state(cached_state);
+ cached_state = NULL;
if (!loops) {
max_bytes = PAGE_CACHE_SIZE;
loops = 1;
Patches currently in stable-queue which might be from clm@xxxxxx are
queue-3.14/btrfs-allocate-raid-type-kobjects-dynamically.patch
queue-3.14/btrfs-fix-null-pointer-crash-of-deleting-a-seed-device.patch
queue-3.14/btrfs-add-ctime-mtime-update-for-btrfs-device-add-remove.patch
queue-3.14/btrfs-fix-double-free-in-find_lock_delalloc_range.patch
queue-3.14/btrfs-don-t-check-nodes-for-extent-items.patch
queue-3.14/btrfs-fix-scrub_print_warning-to-handle-skinny-metadata-extents.patch
queue-3.14/btrfs-fix-use-of-uninit-ret-in-end_extent_writepage.patch
queue-3.14/btrfs-fix-lockdep-warning-with-reclaim-lock-inversion.patch
queue-3.14/fs-btrfs-volumes.c-fix-for-possible-null-pointer-dereference.patch
queue-3.14/btrfs-use-right-type-to-get-real-comparison.patch
queue-3.14/btrfs-set-right-total-device-count-for-seeding-support.patch
queue-3.14/btrfs-make-sure-there-are-not-any-read-requests-before-stopping-workers.patch
queue-3.14/btrfs-mark-mapping-with-error-flag-to-report-errors-to-userspace.patch
queue-3.14/btrfs-output-warning-instead-of-error-when-loading-free-space-cache-failed.patch
queue-3.14/btrfs-send-don-t-error-in-the-presence-of-subvols-snapshots.patch
--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html