Patch "Btrfs: fix double free in find_lock_delalloc_range" has been added to the 3.15-stable tree

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This is a note to let you know that I've just added the patch titled

    Btrfs: fix double free in find_lock_delalloc_range

to the 3.15-stable tree which can be found at:
    http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
     btrfs-fix-double-free-in-find_lock_delalloc_range.patch
and it can be found in the queue-3.15 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.


>From 7d78874273463a784759916fc3e0b4e2eb141c70 Mon Sep 17 00:00:00 2001
From: Chris Mason <clm@xxxxxx>
Date: Wed, 21 May 2014 05:49:54 -0700
Subject: Btrfs: fix double free in find_lock_delalloc_range

From: Chris Mason <clm@xxxxxx>

commit 7d78874273463a784759916fc3e0b4e2eb141c70 upstream.

We need to NULL the cached_state after freeing it, otherwise
we might free it again if find_delalloc_range doesn't find anything.

Signed-off-by: Chris Mason <clm@xxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

---
 fs/btrfs/extent_io.c |    1 +
 1 file changed, 1 insertion(+)

--- a/fs/btrfs/extent_io.c
+++ b/fs/btrfs/extent_io.c
@@ -1693,6 +1693,7 @@ again:
 		 * shortening the size of the delalloc range we're searching
 		 */
 		free_extent_state(cached_state);
+		cached_state = NULL;
 		if (!loops) {
 			max_bytes = PAGE_CACHE_SIZE;
 			loops = 1;


Patches currently in stable-queue which might be from clm@xxxxxx are

queue-3.15/btrfs-allocate-raid-type-kobjects-dynamically.patch
queue-3.15/btrfs-fix-null-pointer-crash-of-deleting-a-seed-device.patch
queue-3.15/btrfs-send-use-the-right-limits-for-xattr-names-and-values.patch
queue-3.15/btrfs-add-ctime-mtime-update-for-btrfs-device-add-remove.patch
queue-3.15/btrfs-read-inode-size-after-acquiring-the-mutex-when-punching-a-hole.patch
queue-3.15/btrfs-fix-double-free-in-find_lock_delalloc_range.patch
queue-3.15/btrfs-don-t-check-nodes-for-extent-items.patch
queue-3.15/btrfs-fix-scrub_print_warning-to-handle-skinny-metadata-extents.patch
queue-3.15/btrfs-fix-use-of-uninit-ret-in-end_extent_writepage.patch
queue-3.15/fs-btrfs-volumes.c-fix-for-possible-null-pointer-dereference.patch
queue-3.15/btrfs-use-right-type-to-get-real-comparison.patch
queue-3.15/btrfs-set-right-total-device-count-for-seeding-support.patch
queue-3.15/btrfs-make-sure-there-are-not-any-read-requests-before-stopping-workers.patch
queue-3.15/btrfs-mark-mapping-with-error-flag-to-report-errors-to-userspace.patch
queue-3.15/btrfs-send-account-for-orphan-directories-when-building-path-strings.patch
queue-3.15/btrfs-fix-leaf-corruption-caused-by-enospc-while-hole-punching.patch
queue-3.15/btrfs-output-warning-instead-of-error-when-loading-free-space-cache-failed.patch
queue-3.15/btrfs-send-don-t-error-in-the-presence-of-subvols-snapshots.patch
--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Linux Kernel]     [Kernel Development Newbies]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite Hiking]     [Linux Kernel]     [Linux SCSI]