This is a note to let you know that I've just added the patch titled
Btrfs: fix double free in find_lock_delalloc_range
to the 3.15-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
btrfs-fix-double-free-in-find_lock_delalloc_range.patch
and it can be found in the queue-3.15 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From 7d78874273463a784759916fc3e0b4e2eb141c70 Mon Sep 17 00:00:00 2001
From: Chris Mason <clm@xxxxxx>
Date: Wed, 21 May 2014 05:49:54 -0700
Subject: Btrfs: fix double free in find_lock_delalloc_range
From: Chris Mason <clm@xxxxxx>
commit 7d78874273463a784759916fc3e0b4e2eb141c70 upstream.
We need to NULL the cached_state after freeing it, otherwise
we might free it again if find_delalloc_range doesn't find anything.
Signed-off-by: Chris Mason <clm@xxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
fs/btrfs/extent_io.c | 1 +
1 file changed, 1 insertion(+)
--- a/fs/btrfs/extent_io.c
+++ b/fs/btrfs/extent_io.c
@@ -1693,6 +1693,7 @@ again:
* shortening the size of the delalloc range we're searching
*/
free_extent_state(cached_state);
+ cached_state = NULL;
if (!loops) {
max_bytes = PAGE_CACHE_SIZE;
loops = 1;
Patches currently in stable-queue which might be from clm@xxxxxx are
queue-3.15/btrfs-allocate-raid-type-kobjects-dynamically.patch
queue-3.15/btrfs-fix-null-pointer-crash-of-deleting-a-seed-device.patch
queue-3.15/btrfs-send-use-the-right-limits-for-xattr-names-and-values.patch
queue-3.15/btrfs-add-ctime-mtime-update-for-btrfs-device-add-remove.patch
queue-3.15/btrfs-read-inode-size-after-acquiring-the-mutex-when-punching-a-hole.patch
queue-3.15/btrfs-fix-double-free-in-find_lock_delalloc_range.patch
queue-3.15/btrfs-don-t-check-nodes-for-extent-items.patch
queue-3.15/btrfs-fix-scrub_print_warning-to-handle-skinny-metadata-extents.patch
queue-3.15/btrfs-fix-use-of-uninit-ret-in-end_extent_writepage.patch
queue-3.15/fs-btrfs-volumes.c-fix-for-possible-null-pointer-dereference.patch
queue-3.15/btrfs-use-right-type-to-get-real-comparison.patch
queue-3.15/btrfs-set-right-total-device-count-for-seeding-support.patch
queue-3.15/btrfs-make-sure-there-are-not-any-read-requests-before-stopping-workers.patch
queue-3.15/btrfs-mark-mapping-with-error-flag-to-report-errors-to-userspace.patch
queue-3.15/btrfs-send-account-for-orphan-directories-when-building-path-strings.patch
queue-3.15/btrfs-fix-leaf-corruption-caused-by-enospc-while-hole-punching.patch
queue-3.15/btrfs-output-warning-instead-of-error-when-loading-free-space-cache-failed.patch
queue-3.15/btrfs-send-don-t-error-in-the-presence-of-subvols-snapshots.patch
--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html