Jan Kara f05f2429ee udf: Fix error handling in udf_new_inode() ...

When memory allocation of iinfo or block allocation fails, already
allocated struct udf_inode_info gets freed with iput() and
udf_evict_inode() may look at inode fields which are not properly
initialized. Fix it by marking inode bad before dropping reference to it
in udf_new_inode().

Reported-by: syzbot+9ca499bb57a2b9e4c652@syzkaller.appspotmail.com
Signed-off-by: Jan Kara <jack@suse.cz>

2021-12-15 13:08:34 +01:00

..

balloc.c

…

dir.c

udf: Fix crash after seekdir

2021-11-09 12:53:58 +01:00

directory.c

…

ecma_167.h

udf: Get rid of 0-length arrays in struct fileIdentDesc

2021-08-11 16:54:44 +02:00

file.c

mm: require ->set_page_dirty to be explicitly wired up

2021-06-29 10:53:48 -07:00

ialloc.c

udf: Fix error handling in udf_new_inode()

2021-12-15 13:08:34 +01:00

inode.c

udf: Get rid of 0-length arrays in struct fileIdentDesc

2021-08-11 16:54:44 +02:00

Kconfig

…

lowlevel.c

udf: use sb_bdev_nr_blocks

2021-10-18 14:43:23 -06:00

Makefile

…

misc.c

udf_get_extendedattr() had no boundary checks.

2021-08-23 13:35:19 +02:00

namei.c

udf: Fix crash after seekdir

2021-11-09 12:53:58 +01:00

osta_udf.h

udf: Get rid of 0-length arrays

2021-08-11 16:54:44 +02:00

partition.c

…

super.c

udf: Fix crash after seekdir

2021-11-09 12:53:58 +01:00

symlink.c

…

truncate.c

…

udf_i.h

…

udf_sb.h

udf: Fix iocharset=utf8 mount option

2021-08-12 16:07:09 +02:00

udfdecl.h

udf: Get rid of 0-length arrays in struct fileIdentDesc

2021-08-11 16:54:44 +02:00

udfend.h

…

udftime.c

…

unicode.c

udf: Fix iocharset=utf8 mount option

2021-08-12 16:07:09 +02:00