Ilya Dryomov 131a6926fa ceph: avoid a use-after-free in ceph_destroy_options() ...

[ Upstream commit 8aaff15168 ]

syzbot reported a use-after-free in ceph_destroy_options(), called from
ceph_mount().  The problem was that create_fs_client() consumed the opt
pointer on some errors, but not on all of them.  Make sure it always
consumes both libceph and ceph options.

Reported-by: syzbot+8ab6f1042021b4eed062@syzkaller.appspotmail.com
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Reviewed-by: "Yan, Zheng" <zyan@redhat.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-10-10 08:55:57 +02:00

..

acl.c

ceph: unify inode i_ctime update

2017-06-14 19:37:23 +02:00

addr.c

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

cache.c

vfs: change inode times to use struct timespec64

2018-06-05 16:57:31 -07:00

cache.h

…

caps.c

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

ceph_frag.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

debugfs.c

libceph, ceph: change permission for readonly debugfs entries

2018-04-02 10:12:45 +02:00

dir.c

ceph: support file lock on directory

2018-06-04 20:45:56 +02:00

export.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

file.c

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

inode.c

ceph: fix dentry leak in splice_dentry()

2018-06-26 18:42:44 +02:00

ioctl.c

libceph, ceph: move ceph_calc_file_object_mapping() to striper.c

2018-04-02 10:12:43 +02:00

ioctl.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

Kconfig

fs/*/Kconfig: drop links to 404-compliant http://acl.bestbits.at

2018-01-01 12:45:37 -07:00

locks.c

ceph: add newline to end of debug message format

2018-04-02 10:12:44 +02:00

Makefile

ceph: quota: add initial infrastructure to support cephfs quotas

2018-04-02 11:17:51 +02:00

mds_client.c

Merge tag 'vfs-timespec64' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground

2018-06-15 07:31:07 +09:00

mds_client.h

ceph: quota: add counter for snaprealms with quota

2018-04-02 11:17:53 +02:00

mdsmap.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

quota.c

ceph: quota: report root dir quota usage in statfs

2018-04-02 11:17:53 +02:00

snap.c

vfs: change inode times to use struct timespec64

2018-06-05 16:57:31 -07:00

strings.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

super.c

ceph: avoid a use-after-free in ceph_destroy_options()

2018-10-10 08:55:57 +02:00

super.h

ceph: quota: report root dir quota usage in statfs

2018-04-02 11:17:53 +02:00

xattr.c

ceph: always get rstat from auth mds

2018-06-04 20:45:55 +02:00