J. Bruce Fields 4425ca3677 nfsd: fix crash on COPY_NOTIFY with special stateid ... [ Upstream commit 074b07d94e ] RTM says "If the special ONE stateid is passed to nfs4_preprocess_stateid_op(), it returns status=0 but does not set *cstid. nfsd4_copy_notify() depends on stid being set if status=0, and thus can crash if the client sends the right COPY_NOTIFY RPC." RFC 7862 says "The cna_src_stateid MUST refer to either open or locking states provided earlier by the server. If it is invalid, then the operation MUST fail." The RFC doesn't specify an error, and the choice doesn't matter much as this is clearly illegal client behavior, but bad_stateid seems reasonable. Simplest is just to guarantee that nfs4_preprocess_stateid_op, called with non-NULL cstid, errors out if it can't return a stateid. Reported-by: rtm@csail.mit.edu Fixes: 624322f1ad ("NFSD add COPY_NOTIFY operation") Signed-off-by: J. Bruce Fields <bfields@redhat.com> Signed-off-by: Chuck Lever <chuck.lever@oracle.com> Reviewed-by: Olga Kornievskaia <kolga@netapp.com> Tested-by: Olga Kornievskaia <kolga@netapp.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-03-08 19:12:36 +01:00
..
9p	Revert "fs/9p: search open fids first"	2022-02-08 18:34:04 +01:00
adfs	…
affs	…
afs	afs: Fix mmap	2021-12-22 09:32:45 +01:00
autofs	…
befs	…
bfs	…
btrfs	btrfs: get rid of warning on transaction commit when using flushoncommit	2022-03-08 19:12:29 +01:00
cachefiles	…
ceph	ceph: put the requests/sessions when it fails to alloc memory	2022-02-01 17:27:14 +01:00
cifs	cifs: modefromsids must add an ACE for authenticated users	2022-03-08 19:12:30 +01:00
coda	…
configfs	configfs: fix a race in configfs_{,un}register_subsystem()	2022-03-02 11:48:02 +01:00
cramfs	…
crypto	fscrypt: allow 256-bit master keys with AES-256-XTS	2021-11-18 19:16:11 +01:00
debugfs	debugfs: lockdown: Allow reading debugfs files that are not world readable	2022-01-27 11:03:55 +01:00
devpts	fsnotify: fix fsnotify hooks in pseudo filesystems	2022-02-01 17:27:01 +01:00
dlm	fs: dlm: filter user dlm messages for kernel locks	2022-01-27 11:04:23 +01:00
ecryptfs	…
efivarfs	…
efs	…
erofs	erofs: fix deadlock when shrink erofs slab	2021-12-01 09:04:50 +01:00
exfat	exfat: fix i_blocks for files truncated over 4 GiB	2022-03-08 19:12:32 +01:00
exportfs	…
ext2	…
ext4	ext4: fast commit may miss file actions	2022-03-08 19:12:32 +01:00
f2fs	f2fs: fix to check available space of CP area correctly in update_ckpt_flags()	2022-01-27 11:05:30 +01:00
fat	…
freevxfs	…
fscache	…
fuse	fuse: Pass correct lend value to filemap_write_and_wait_range()	2022-01-27 11:05:08 +01:00
gfs2	gfs2: Fix gfs2_release for non-writers regression	2022-02-16 12:56:18 +01:00
hfs	…
hfsplus	…
hostfs	…
hpfs	…
hugetlbfs	…
iomap	iomap: Fix inline extent handling in iomap_readpage	2021-12-01 09:04:44 +01:00
isofs	isofs: Fix out of bound access for corrupted isofs image	2021-11-12 15:05:50 +01:00
jbd2	ext4: fast commit may not fallback for ineligible commit	2022-03-08 19:12:32 +01:00
jffs2	jffs2: GC deadlock reading a page that is used in jffs2_write_begin()	2022-01-27 11:04:49 +01:00
jfs	JFS: fix memleak in jfs_mount	2021-11-18 19:16:48 +01:00
kernfs	…
ksmbd	ksmbd: don't align last entry offset in smb2 query directory	2022-02-23 12:03:18 +01:00
lockd	lockd: fix failure to cleanup client locks	2022-02-05 12:38:57 +01:00
minix	…
netfs	netfs: fix parameter of cleanup()	2021-12-29 12:28:59 +01:00
nfs	NFS: Do not report writeback errors in nfs_getattr()	2022-02-23 12:03:15 +01:00
nfs_common	…
nfsd	nfsd: fix crash on COPY_NOTIFY with special stateid	2022-03-08 19:12:36 +01:00
nilfs2	…
nls	…
notify	fanotify: Fix stale file descriptor in copy_event_to_user()	2022-02-05 12:38:59 +01:00
ntfs	…
ntfs3	…
ocfs2	ocfs2: fix a deadlock when commit trans	2022-02-01 17:27:05 +01:00
omfs	…
openpromfs	…
orangefs	orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()	2022-01-20 09:13:13 +01:00
overlayfs	ovl: fix NULL pointer dereference in copy up warning	2022-02-05 12:38:59 +01:00
proc	fs/proc: task_mmu.c: don't read mapcount for migration entry	2022-02-23 12:03:02 +01:00
pstore	pstore/blk: Use "%lu" to format unsigned long	2021-11-25 09:48:42 +01:00
qnx4	…
qnx6	…
quota	quota: make dquot_quota_sync return errors from ->sync_fs	2022-02-23 12:03:06 +01:00
ramfs	…
reiserfs	…
romfs	…
smbfs_common	cifs: Fix crash on unload of cifs_arc4.ko	2021-12-14 10:57:12 +01:00
squashfs	…
sysfs	…
sysv	…
tracefs	tracefs: Set the group ownership in apply_options() not parse_options()	2022-03-02 11:48:05 +01:00
ubifs	ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers	2022-01-27 11:05:07 +01:00
udf	udf: Fix NULL ptr deref when converting from inline format	2022-02-01 17:27:00 +01:00
ufs	…
unicode	…
vboxsf	…
verity	…
xfs	xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate	2022-01-11 15:35:16 +01:00
zonefs	zonefs: add MODULE_ALIAS_FS	2021-12-22 09:32:48 +01:00
Kconfig	…
Kconfig.binfmt	…
Makefile	…
aio.c	aio: Fix incorrect usage of eventfd_signal_allowed()	2021-12-14 10:57:22 +01:00
anon_inodes.c	…
attr.c	fs: handle circular mappings correctly	2021-11-25 09:48:46 +01:00
bad_inode.c	…
binfmt_aout.c	…
binfmt_elf.c	…
binfmt_elf_fdpic.c	…
binfmt_flat.c	…
binfmt_misc.c	…
binfmt_script.c	…
buffer.c	…
char_dev.c	…
compat_binfmt_elf.c	…
coredump.c	…
d_path.c	…
dax.c	…
dcache.c	…
direct-io.c	…
drop_caches.c	…
eventfd.c	…
eventpoll.c	…
exec.c	signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV)	2021-11-25 09:49:06 +01:00
fcntl.c	…
fhandle.c	…
file.c	fget: clarify and improve __fget_files() implementation	2022-01-16 09:12:42 +01:00
file_table.c	…
filesystems.c	…
fs-writeback.c	…
fs_context.c	vfs: fs_context: fix up param length parsing in legacy_parse_param	2022-01-20 09:13:14 +01:00
fs_parser.c	…
fs_pin.c	…
fs_struct.c	…
fs_types.c	…
fsopen.c	…
init.c	…
inode.c	fs: export an inode_update_time helper	2021-11-25 09:49:08 +01:00
internal.h	…
io-wq.c	io-wq: drop wqe lock before creating new worker	2021-12-22 09:32:51 +01:00
io-wq.h	…
io_uring.c	io_uring: fix no lock protection for ctx->cq_extra	2022-03-08 19:12:33 +01:00
ioctl.c	…
kernel_read_file.c	…
libfs.c	…
locks.c	…
mbcache.c	…
mount.h	…
mpage.c	…
namei.c	fsnotify: invalidate dcache before IN_DELETE event	2022-02-01 17:27:15 +01:00
namespace.c	fs/mount_setattr: always cleanup mount_kattr	2022-01-05 12:42:39 +01:00
no-block.c	…
nsfs.c	…
open.c	mm, thp: fix incorrect unmap behavior for private pages	2021-11-18 19:17:17 +01:00
pipe.c	…
pnode.c	…
pnode.h	…
posix_acl.c	…
proc_namespace.c	…
read_write.c	…
readdir.c	…
remap_range.c	…
select.c	select: Fix indefinitely sleeping task in poll_schedule_timeout()	2022-01-29 10:58:25 +01:00
seq_file.c	…
signalfd.c	signalfd: use wake_up_pollfree()	2021-12-14 10:57:15 +01:00
splice.c	…
stack.c	…
stat.c	…
statfs.c	…
super.c	vfs: make freeze_super abort when sync_filesystem returns error	2022-02-23 12:03:05 +01:00
sync.c	…
timerfd.c	…
userfaultfd.c	…
utimes.c	…
xattr.c	…