Jan Kara a61d90d75d jbd: fix race in buffer processing in commit code ... In commit code, we scan buffers attached to a transaction. During this scan, we sometimes have to drop j_list_lock and then we recheck whether the journal buffer head didn't get freed by journal_try_to_free_buffers(). But checking for buffer_jbd(bh) isn't enough because a new journal head could get attached to our buffer head. So add a check whether the journal head remained the same and whether it's still at the same transaction and list. This is a nasty bug and can cause problems like memory corruption (use after free) or trigger various assertions in JBD code (observed). Signed-off-by: Jan Kara <jack@suse.cz> Cc: <stable@kernel.org> Cc: <linux-ext4@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2009-06-09 16:59:03 -07:00
..
9p	Fix a leak in failure exit in 9p ->get_sb()	2009-05-09 10:49:40 -04:00
adfs	…
affs	Fix races around the access to ->s_options	2009-05-09 10:51:34 -04:00
afs	Fix races around the access to ->s_options	2009-05-09 10:51:34 -04:00
autofs	Fix autofs_expire()	2009-04-20 23:01:15 -04:00
autofs4	autofs4: remove hashed check in validate_wait()	2009-06-09 16:59:03 -07:00
befs	befs: fix build on parisc	2009-04-08 10:21:43 -07:00
bfs	…
btrfs	Merge git://git.kernel.org/pub/scm/linux/kernel/git/mason/btrfs-unstable	2009-06-05 11:54:28 -07:00
cachefiles	CacheFiles: Fixup renamed filenames in comments in internal.h	2009-05-27 10:20:13 -07:00
cifs	[CIFS] Avoid open on possible directories since Samba now rejects them	2009-05-23 18:57:25 +00:00
coda	…
configfs	configfs: Fix Trivial Warning in fs/configfs/symlink.c	2009-04-21 12:59:21 -07:00
cramfs	…
debugfs	…
devpts	devpts: correctly set default options	2009-05-15 08:03:23 -07:00
dlm	…
ecryptfs	Convert obvious places to deactivate_locked_super()	2009-05-09 10:49:40 -04:00
efs	…
exofs	…
exportfs	…
ext2	ext2: missing unlock in ext2_quota_write()	2009-04-27 16:49:52 +02:00
ext3	ext3: Try to avoid starting a transaction in writepage for data=writepage	2009-04-08 13:15:10 -04:00
ext4	ext4: Fix race in ext4_inode_info.i_cached_extent	2009-05-15 09:07:28 -04:00
fat	vfat: Note the NLS requirement	2009-04-17 09:32:11 -07:00
freevxfs	…
fscache	FS-Cache: Fixup renamed filenames in comments in internal.h	2009-05-27 10:20:13 -07:00
fuse	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse	2009-05-13 16:32:57 -07:00
gfs2	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6	2009-05-10 10:49:08 -07:00
hfs	hfs: fix memory leak when unmounting	2009-04-13 15:04:29 -07:00
hfsplus	…
hostfs	…
hpfs	Fix races around the access to ->s_options	2009-05-09 10:51:34 -04:00
hppfs	…
hugetlbfs	Remove implementation of readpage from the hugetlbfs_aops	2009-05-13 08:04:45 -07:00
isofs	…
jbd	jbd: fix race in buffer processing in commit code	2009-06-09 16:59:03 -07:00
jbd2	jbd2: use SWRITE_SYNC_PLUG when writing synchronous revoke records	2009-04-14 07:50:56 -04:00
jffs2	jffs2: Fix corruption when flash erase/write failure	2009-05-29 10:44:46 +01:00
jfs	…
lockd	lockd: fix list corruption on lockd restart	2009-05-06 17:19:36 -04:00
minix	…
ncpfs	ncpfs: use memdup_user()	2009-04-20 23:02:51 -04:00
nfs	NFSv4: Fix the case where NFSv4 renewal fails	2009-05-26 14:51:00 -04:00
nfs_common	…
nfsd	nfsd: fix hung up of nfs client while sync write data to nfs server	2009-05-27 17:40:06 -04:00
nilfs2	nilfs2: fix bh leak in nilfs_cpfile_delete_checkpoints function	2009-05-30 22:07:50 +09:00
nls	…
notify	inotify: use GFP_NOFS in kernel_event() to work around a lockdep false-positive	2009-05-06 16:36:09 -07:00
ntfs	…
ocfs2	ocfs2: Use nd_set_link().	2009-05-09 10:49:40 -04:00
omfs	…
openpromfs	…
partitions	…
proc	procfs: make errno values consistent when open pident vs exit(2) race occurs	2009-05-29 08:40:02 -07:00
qnx4	…
quota	quota: remove obsolete comments in fs/quota/Makefile	2009-04-27 16:49:52 +02:00
ramfs	ramfs: fix double freeing s_fs_info on failed mount	2009-04-07 07:39:59 -07:00
reiserfs	reiserfs: fixup perms when xattrs are disabled	2009-05-17 11:45:45 -07:00
romfs	ROMFS: romfs_dev_read() error ignored	2009-05-09 10:49:41 -04:00
smbfs	…
squashfs	Squashfs: cody tidying, remove commented out line in Makefile	2009-05-13 03:25:20 +01:00
sysfs	sysfs: file.c: use create_singlethread_workqueue()	2009-05-28 14:24:07 -07:00
sysv	…
ubifs	Convert obvious places to deactivate_locked_super()	2009-05-09 10:49:40 -04:00
udf	…
ufs	switch ufs directories to ufs_sync_file()	2009-05-09 10:49:42 -04:00
xfs	Merge branch 'for-linus' of git://oss.sgi.com/xfs/xfs	2009-06-02 09:47:21 -07:00
Kconfig	nilfs2: update makefile and Kconfig	2009-04-07 08:31:16 -07:00
Kconfig.binfmt	…
Makefile	nilfs2: update makefile and Kconfig	2009-04-07 08:31:16 -07:00
aio.c	…
anon_inodes.c	…
attr.c	…
bad_inode.c	…
binfmt_aout.c	…
binfmt_elf.c	…
binfmt_elf_fdpic.c	ptrace: s/parent/real_parent/ in binfmt_elf_fdpic.c	2009-05-02 15:36:10 -07:00
binfmt_em86.c	…
binfmt_flat.c	flat: fix data sections alignment	2009-05-29 08:40:02 -07:00
binfmt_misc.c	…
binfmt_script.c	…
binfmt_som.c	…
bio-integrity.c	…
bio.c	bio: fix memcpy corruption in bio_copy_user_iov()	2009-04-28 20:24:29 +02:00
block_dev.c	…
buffer.c	Fix nobh_truncate_page() to not pass stack garbage to get_block()	2009-06-06 06:17:25 -04:00
char_dev.c	…
compat.c	do_execve() must not clear fs->in_exec if it was set by another thread	2009-04-24 07:39:45 -07:00
compat_binfmt_elf.c	…
compat_ioctl.c	fs/compat_ioctl: fix build when !BLOCK	2009-04-20 23:01:16 -04:00
dcache.c	fs: dcache fix LRU ordering	2009-05-09 10:49:40 -04:00
dcookies.c	…
direct-io.c	dio: Remove code handling bio_alloc failure with __GFP_WAIT	2009-04-15 12:10:13 +02:00
drop_caches.c	…
eventfd.c	…
eventpoll.c	epoll: fix size check in epoll_create()	2009-05-12 14:11:35 -07:00
exec.c	Switch open_exec() and sys_uselib() to do_open_filp()	2009-05-09 10:49:42 -04:00
fcntl.c	dup2: Fix return value with oldfd == newfd and invalid fd	2009-05-11 12:18:06 -07:00
fifo.c	…
file.c	…
file_table.c	…
filesystems.c	fs: Mark get_filesystem_list() as __init function.	2009-04-20 23:02:52 -04:00
fs-writeback.c	…
fs_struct.c	…
generic_acl.c	…
inode.c	integrity: fix IMA inode leak	2009-06-06 14:33:41 -07:00
internal.h	…
ioctl.c	fiemap: fix problem with setting FIEMAP_EXTENT_LAST	2009-05-06 16:36:09 -07:00
ioprio.c	…
libfs.c	Convert obvious places to deactivate_locked_super()	2009-05-09 10:49:40 -04:00
locks.c	…
mbcache.c	…
mpage.c	…
namei.c	Switch open_exec() and sys_uselib() to do_open_filp()	2009-05-09 10:49:42 -04:00
namespace.c	Fix races around the access to ->s_options	2009-05-09 10:51:34 -04:00
nfsctl.c	…
no-block.c	…
open.c	Switch open_exec() and sys_uselib() to do_open_filp()	2009-05-09 10:49:42 -04:00
pipe.c	splice: add helpers for locking pipe inode	2009-04-15 12:10:12 +02:00
pnode.c	…
pnode.h	…
posix_acl.c	…
read_write.c	…
read_write.h	…
readdir.c	…
select.c	…
seq_file.c	…
signalfd.c	…
splice.c	splice: fix new kernel-doc warnings	2009-04-17 07:38:07 -07:00
stack.c	…
stat.c	kill vfs_stat_fd / vfs_lstat_fd	2009-04-20 23:02:52 -04:00
super.c	NULL noise in fs/super.c:kill_bdev_super()	2009-05-09 10:49:41 -04:00
sync.c	…
timerfd.c	…
utimes.c	…
xattr.c	xattr: use memdup_user()	2009-04-20 23:02:50 -04:00
xattr_acl.c	…