Linux kernel stable tree https://git.rulkc.org/pub/scm/linux/kernel/git/stable/linux.git/atom?h=linux-3.2.y 2015-08-06T23:32:13+00:00 2015-08-06T23:32:13+00:00 Sasha Levin sasha.levin@oracle.com 2015-05-28T22:44:29+00:00 urn:sha1:a5045e0fee1a7b2cf132afb94977d4c8d781bd04 commit dcbff39da3d815f08750552fdd04f96b51751129 upstream. match_token() expects a NULL terminator at the end of the token list so that it would know where to stop. Not having one causes it to overrun to invalid memory. In practice, passing a mount option that omfs didn't recognize would sometimes panic the system. Signed-off-by: Sasha Levin <sasha.levin@oracle.com> Signed-off-by: Bob Copeland <me@bobcopeland.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Ben Hutchings <ben@decadent.org.uk> 2010-10-29T08:16:13+00:00 Al Viro viro@zeniv.linux.org.uk 2010-07-24T20:46:55+00:00 urn:sha1:152a08366671080f27b32e0c411ad620c5f88b57 ... and switch of the obvious get_sb_bdev() users to ->mount() Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> 2010-08-10T18:47:36+00:00 Linus Torvalds torvalds@linux-foundation.org 2010-08-10T18:47:36+00:00 urn:sha1:8196867c74890ccdf40a2b5e3e173597fbc4f9ac * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/bcopeland/omfs: omfs: fix uninitialized variable warning omfs: sanity check cluster size omfs: refuse to mount if bitmap pointer is obviously wrong omfs: check bounds on block numbers before passing to sb_bread omfs: fix memory leak 2010-08-09T20:48:05+00:00 Al Viro viro@zeniv.linux.org.uk 2010-06-06T14:12:01+00:00 urn:sha1:69c9e750176b409559b2361fbb28fa7bbf3c5461 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> 2010-07-10T18:38:11+00:00 Bob Copeland me@bobcopeland.com 2010-07-06T15:16:46+00:00 urn:sha1:8800a044c71a128633cf3febaf4780531a991334 A corrupt filesystem could have a bad cluster size; this could result in the filesystem allocating too much space for files if too large, or getting stuck in omfs_allocate_block if too small. The proper range is 1-8 blocks. Reported-by: Eric Sesterhenn <snakebyte@gmx.de> Signed-off-by: Bob Copeland <me@bobcopeland.com> 2010-07-10T18:37:39+00:00 Bob Copeland me@bobcopeland.com 2008-08-14T22:43:59+00:00 urn:sha1:9442e54f433eff9b6fbd0836611df4c1919df370 If the free space bitmap pointer is corrupted such that it lies outside of the number of blocks in the filesystem, print a message and fail the mount so the user can fix it offline. Signed-off-by: Bob Copeland <me@bobcopeland.com> 2010-07-10T18:37:06+00:00 Bob Copeland me@bobcopeland.com 2008-09-06T21:51:53+00:00 urn:sha1:f068272cb2f134a194b93e94a8e0672bfce48cd8 In case of filesystem corruption, passing unchecked block numbers into sb_bread can result in an infinite loop in __getblk(). Introduce a wrapper function omfs_sbread() to check the block numbers and to also perform the clus_to_blk() scaling. Signed-off-by: Bob Copeland <me@bobcopeland.com> 2010-07-06T15:05:31+00:00 Davidlohr Bueso dave.bueso@gmail.com 2010-07-06T04:50:58+00:00 urn:sha1:70d9e384aa7df681cfffd65947af72b22e86690e In the error path of omfs_fill_super(), the FS super block info (sbi) is not being freed. Correct this. Signed-off-by: Davidlohr Bueso <dave@gnu.org> Signed-off-by: Bob Copeland <me@bobcopeland.com> 2010-05-21T22:31:25+00:00 Dmitry Monakhov dmonakhov@openvz.org 2010-03-04T14:32:17+00:00 urn:sha1:6a9e652c88fad648ea088ac07dbc671a9813f75e Signed-off-by: Dmitry Monakhov <dmonakhov@openvz.org> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> 2010-04-23T00:08:44+00:00 Jiri Kosina jkosina@suse.cz 2010-04-23T00:08:44+00:00 urn:sha1:6c9468e9eb1252eaefd94ce7f06e1be9b0b641b1