Mohamed Ghannam 5edbe3c024 RDS: null pointer dereference in rds_atomic_free_op ...

[ Upstream commit 7d11f77f84 ]

set rm->atomic.op_active to 0 when rds_pin_pages() fails
or the user supplied address is invalid,
this prevents a NULL pointer usage in rds_atomic_free_op()

Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-01-17 09:45:21 +01:00

..

af_rds.c

RDS: validate the requested traces user input against max supported

2017-01-06 22:14:26 -05:00

bind.c

RDS: make rhashtable_params const

2017-08-28 11:30:02 -07:00

cong.c

…

connection.c

rds: reduce memory footprint for RDS when transport is RDMA

2017-08-03 09:27:59 -07:00

ib_cm.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-03-15 11:59:10 -07:00

ib_fmr.c

rds: ib: unmap the scatter/gather list when error

2017-03-13 23:20:05 -07:00

ib_frmr.c

RDS: IB: split the mr registration and invalidation path

2017-01-02 14:02:47 -08:00

ib_mr.h

rds: ib: add the static type to the function

2017-03-13 23:20:05 -07:00

ib_rdma.c

net, rds: convert rds_ib_device.refcount from atomic_t to refcount_t

2017-07-04 22:35:17 +01:00

ib_recv.c

rds: ib: Fix NULL pointer dereference in debug code

2017-11-10 14:54:47 +09:00

ib_ring.c

…

ib_send.c

rds: Fix inaccurate accounting of unsignaled wrs

2017-10-26 17:35:57 +09:00

ib_stats.c

RDS: IB: add few useful cache stasts

2017-01-02 14:02:51 -08:00

ib_sysctl.c

…

ib.c

net, rds: convert rds_ib_device.refcount from atomic_t to refcount_t

2017-07-04 22:35:17 +01:00

ib.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

info.c

…

info.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

Kconfig

…

loop.c

…

loop.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

message.c

net, rds: convert rds_message.m_refcount from atomic_t to refcount_t

2017-07-04 22:35:18 +01:00

page.c

rds: remove dead code

2016-12-26 21:35:39 -05:00

rdma_transport.c

RDS: RDMA: start rdma listening after init

2017-01-02 14:02:45 -08:00

rdma_transport.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

rdma.c

RDS: null pointer dereference in rds_atomic_free_op

2018-01-17 09:45:21 +01:00

rds_single_path.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

rds.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

recv.c

net, rds: convert rds_incoming.i_refcount from atomic_t to refcount_t

2017-07-04 22:35:17 +01:00

send.c

RDS: Check cmsg_len before dereferencing CMSG_DATA

2018-01-02 20:31:07 +01:00

stats.c

…

sysctl.c

…

tcp_connect.c

rds: cancel send/recv work before queuing connection shutdown

2017-07-16 19:07:35 -07:00

tcp_listen.c

rds: tcp: use sock_create_lite() to create the accept socket

2017-07-08 11:16:16 +01:00

tcp_recv.c

RDS: add receive message trace used by application

2017-01-02 14:02:59 -08:00

tcp_send.c

rds: cancel send/recv work before queuing connection shutdown

2017-07-16 19:07:35 -07:00

tcp_stats.c

…

tcp.c

rds: cancel send/recv work before queuing connection shutdown

2017-07-16 19:07:35 -07:00

tcp.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

threads.c

rds: cancel send/recv work before queuing connection shutdown

2017-07-16 19:07:35 -07:00

transport.c

rds: remove unnecessary returned value check

2017-03-03 09:51:22 -08:00