Jan Kara cbf96c58e2 udf: Fix NULL ptr deref when converting from inline format ... commit 7fc3b7c298 upstream. udf_expand_file_adinicb() calls directly ->writepage to write data expanded into a page. This however misses to setup inode for writeback properly and so we can crash on inode->i_wb dereference when submitting page for IO like: BUG: kernel NULL pointer dereference, address: 0000000000000158 #PF: supervisor read access in kernel mode ... <TASK> __folio_start_writeback+0x2ac/0x350 __block_write_full_page+0x37d/0x490 udf_expand_file_adinicb+0x255/0x400 [udf] udf_file_write_iter+0xbe/0x1b0 [udf] new_sync_write+0x125/0x1c0 vfs_write+0x28e/0x400 Fix the problem by marking the page dirty and going through the standard writeback path to write the page. Strictly speaking we would not even have to write the page but we want to catch e.g. ENOSPC errors early. Reported-by: butt3rflyh4ck <butterflyhuangxx@gmail.com> CC: stable@vger.kernel.org Fixes: 52ebea749a ("writeback: make backing_dev_info host cgroup-specific bdi_writebacks") Reviewed-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Jan Kara <jack@suse.cz> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-02-01 17:27:00 +01:00
..
Kconfig	…
Makefile	…
balloc.c	…
dir.c	udf: Fix crash after seekdir	2021-11-25 09:48:46 +01:00
directory.c	…
ecma_167.h	…
file.c	…
ialloc.c	udf: Fix error handling in udf_new_inode()	2022-01-27 11:05:02 +01:00
inode.c	udf: Fix NULL ptr deref when converting from inline format	2022-02-01 17:27:00 +01:00
lowlevel.c	…
misc.c	…
namei.c	udf: Fix crash after seekdir	2021-11-25 09:48:46 +01:00
osta_udf.h	…
partition.c	…
super.c	udf: Fix crash after seekdir	2021-11-25 09:48:46 +01:00
symlink.c	…
truncate.c	…
udf_i.h	…
udf_sb.h	…
udfdecl.h	…
udfend.h	…
udftime.c	…
unicode.c	…