Thomas Tai cc1dfa8b75 gfs2: fix slab corruption during mounting and umounting gfs file system ... When using cman-3.0.12.1 and gfs2-utils-3.0.12.1, mounting and unmounting GFS2 file system would cause kernel to hang. The slab allocator suggests that it is likely a double free memory corruption. The issue is traced back to v3.9-rc6 where a patch is submitted to use kzalloc() for storing a bitmap instead of using a local variable. The intention is to allocate memory during mount and to free memory during unmount. The original patch misses a code path which has already freed the memory and caused memory corruption. This patch sets the memory pointer to NULL after the memory is freed, so that double free memory corruption will not happen. gdlm_mount() '-- set_recover_size() which use kzalloc() '-- if dlm does not support ops callbacks then '--- free_recover_size() which use kfree() gldm_unmount() '-- free_recover_size() which use kfree() Previous patch which introduced the double free issue is commit 57c7310b8e ("GFS2: use kmalloc for lvb bitmap") Signed-off-by: Thomas Tai <thomas.tai@oracle.com> Signed-off-by: Bob Peterson <rpeterso@redhat.com> Reviewed-by: Liam R. Howlett <Liam.Howlett@Oracle.com>		2017-08-15 11:54:09 -05:00
..
9p	9p: Convert to separately allocated bdi	2017-04-20 12:09:55 -06:00
adfs	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-10-10 20:16:43 -07:00
affs	fs/affs: add rename exchange	2017-05-05 15:24:52 -04:00
afs	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2017-07-05 12:31:59 -07:00
autofs4	Merge branch 'linus' into sched/core, to pick up fixes	2017-06-24 08:57:20 +02:00
befs	befs: make export work with cold dcache	2017-05-05 11:35:35 +01:00
bfs	Tigran has moved	2017-05-12 15:57:15 -07:00
btrfs	Writeback error handling fixes (pile #2)	2017-07-07 19:38:17 -07:00
cachefiles	sched/wait: Disambiguate wq_entry->task_list and wq_head->task_list naming	2017-06-20 12:19:14 +02:00
ceph	ceph: unify inode i_ctime update	2017-06-14 19:37:23 +02:00
cifs	first set of cifs fixes for 4.13, bug fixes and improved POSIX character mapping	2017-07-07 17:44:36 -07:00
coda	fs: implement vfs_iter_write using do_iter_write	2017-06-29 17:49:23 -04:00
configfs	configfs: Introduce config_item_get_unless_zero()	2017-06-12 13:20:20 +02:00
cramfs	…
crypto	block: switch bios to blk_status_t	2017-06-09 09:27:32 -06:00
debugfs	fs: fix the location of the kernel-api book	2017-05-16 08:44:23 -03:00
devpts	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-10-10 20:16:43 -07:00
dlm	net: Work around lockdep limitation in sockets that use sockets	2017-03-09 18:23:27 -08:00
ecryptfs	ecryptfs: Convert to separately allocated bdi	2017-04-20 12:09:55 -06:00
efivarfs	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-10-10 20:16:43 -07:00
efs	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
exofs	mm: drop "wait" parameter from write_one_page()	2017-07-05 18:44:22 -04:00
exportfs	Merge branch 'rebased-statx' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-03-03 11:38:56 -08:00
ext2	Writeback error handling fixes (pile #2)	2017-07-07 19:38:17 -07:00
ext4	Writeback error handling fixes (pile #2)	2017-07-07 19:38:17 -07:00
f2fs	Merge branch 'for-4.13/block' of git://git.kernel.dk/linux-block	2017-07-03 10:34:51 -07:00
fat	fat: fix using uninitialized fields of fat_inode/fsinfo_inode	2017-03-09 17:01:10 -08:00
freevxfs	…
fscache	KEYS: Differentiate uses of rcu_dereference_key() and user_key_payload()	2017-03-02 10:09:00 +11:00
fuse	Merge branch 'for-linus' of git://git.kernel.dk/linux-block	2017-05-20 16:12:30 -07:00
gfs2	gfs2: fix slab corruption during mounting and umounting gfs file system	2017-08-15 11:54:09 -05:00
hfs	fs: semove set but not checked AOP_FLAG_UNINTERRUPTIBLE flag	2017-05-08 17:15:14 -07:00
hfsplus	fs: semove set but not checked AOP_FLAG_UNINTERRUPTIBLE flag	2017-05-08 17:15:14 -07:00
hostfs	vfs: remove ".readlink = generic_readlink" assignments	2016-12-09 16:45:04 +01:00
hpfs	sched/headers: Prepare to move signal wakeup & sigpending methods from <linux/sched.h> into <linux/sched/signal.h>	2017-03-02 08:42:32 +01:00
hugetlbfs	mm: larger stack guard gap, between vmas	2017-06-19 21:50:20 +08:00
isofs	sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>	2017-03-02 08:42:31 +01:00
jbd2	Writeback error handling fixes (pile #2)	2017-07-07 19:38:17 -07:00
jffs2	jffs2: fix spelling mistake: "requestied" -> "requested"	2017-04-19 11:35:55 -07:00
jfs	Writeback error handling fixes (pile #1)	2017-07-07 18:39:15 -07:00
kernfs	kernfs: Check KERNFS_HAS_RELEASE before calling kernfs_release_file()	2017-03-17 10:25:59 +09:00
lockd	Another RDMA update from Chuck Lever, and a bunch of miscellaneous	2017-05-10 13:29:23 -07:00
minix	mm: drop "wait" parameter from write_one_page()	2017-07-05 18:44:22 -04:00
ncpfs	mm: per-cgroup memory reclaim stats	2017-07-06 16:24:35 -07:00
nfs	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2017-07-05 11:26:35 -07:00
nfs_common	netns: make struct pernet_operations::id unsigned int	2016-11-18 10:59:15 -05:00
nfsd	Merge branch 'work.read_write' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-07-05 14:35:57 -07:00
nilfs2	Merge branch 'sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2017-07-03 13:08:04 -07:00
nls	…
notify	fanotify: don't expose EOPENSTALE to userspace	2017-04-25 15:48:06 +02:00
ntfs	ntfs: Use ERR_CAST() to avoid cross-structure cast	2017-05-28 10:11:48 -07:00
ocfs2	ocfs2: constify attribute_group structures	2017-07-06 16:24:30 -07:00
omfs	sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>	2017-03-02 08:42:31 +01:00
openpromfs	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
orangefs	sched/wait: Disambiguate wq_entry->task_list and wq_head->task_list naming	2017-06-20 12:19:14 +02:00
overlayfs	UUID/GUID updates:	2017-07-03 09:55:26 -07:00
proc	arm64 updates for 4.13:	2017-07-05 17:09:27 -07:00
pstore	pstore: use memdup_user	2017-06-27 17:02:36 -07:00
qnx4	…
qnx6	…
quota	ext4: fix quota charging for shared xattr blocks	2017-05-24 18:24:07 -04:00
ramfs	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
reiserfs	sched/wait: Rename wait_queue_t => wait_queue_entry_t	2017-06-20 12:18:27 +02:00
romfs	romfs: use different way to generate fsid for BLOCK or MTD	2017-01-24 16:26:14 -08:00
squashfs	fs/pstore: fs/squashfs: change usage of LZ4 to work with new LZ4 version	2017-02-24 17:46:57 -08:00
sysfs	sysfs: be careful of error returns from ops->show()	2017-04-08 17:33:32 +02:00
sysv	mm: drop "wait" parameter from write_one_page()	2017-07-05 18:44:22 -04:00
tracefs	fs: constify tree_descr arrays passed to simple_fill_super()	2017-04-26 23:54:06 -04:00
ubifs	This pull request contains updates for both UBI and UBIFS:	2017-05-13 10:23:12 -07:00
udf	udf: use kmap_atomic for memcpy copying	2017-04-24 16:28:02 +02:00
ufs	Writeback error handling fixes (pile #1)	2017-07-07 18:39:15 -07:00
xfs	Writeback error handling fixes (pile #2)	2017-07-07 19:38:17 -07:00
Kconfig	block, dax: move "select DAX" from BLOCK to FS_DAX	2017-05-08 10:55:27 -07:00
Kconfig.binfmt	docs: fix locations of several documents that got moved	2016-10-24 08:12:35 -02:00
Makefile	logfs: remove from tree	2016-12-14 23:48:11 -05:00
aio.c	fs: add O_DIRECT and aio support for sending down write life time hints	2017-06-27 12:05:36 -06:00
anon_inodes.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
attr.c	sched/headers: Prepare for new header dependencies before moving code to <linux/sched/signal.h>	2017-03-02 08:42:29 +01:00
bad_inode.c	statx: Add a system call to make enhanced file info available	2017-03-02 20:51:15 -05:00
binfmt_aout.c	sched/headers: Prepare for new header dependencies before moving code to <linux/sched/task_stack.h>	2017-03-02 08:42:36 +01:00
binfmt_elf.c	sched/headers: Prepare to move cputime functionality from <linux/sched.h> into <linux/sched/cputime.h>	2017-03-02 08:42:39 +01:00
binfmt_elf_fdpic.c	sched/headers: Prepare to move cputime functionality from <linux/sched.h> into <linux/sched/cputime.h>	2017-03-02 08:42:39 +01:00
binfmt_em86.c	…
binfmt_flat.c	sched/headers: Prepare for new header dependencies before moving code to <linux/sched/task_stack.h>	2017-03-02 08:42:36 +01:00
binfmt_misc.c	fs: constify tree_descr arrays passed to simple_fill_super()	2017-04-26 23:54:06 -04:00
binfmt_script.c	…
block_dev.c	Writeback error handling fixes (pile #2)	2017-07-07 19:38:17 -07:00
buffer.c	Writeback error handling fixes (pile #2)	2017-07-07 19:38:17 -07:00
char_dev.c	chardev: add helper function to register char devs with a struct device	2017-03-21 06:44:32 +01:00
compat.c	fs/compat.c: trim unused includes	2017-04-17 12:52:27 -04:00
compat_binfmt_elf.c	fs/binfmt: Convert obsolete cputime type to nsecs	2017-02-01 09:13:51 +01:00
compat_ioctl.c	tty: add compat_ioctl callbacks	2017-06-09 11:27:20 +02:00
coredump.c	sched/headers: Prepare for new header dependencies before moving code to <linux/sched/task_stack.h>	2017-03-02 08:42:36 +01:00
dax.c	Writeback error handling fixes (pile #2)	2017-07-07 19:38:17 -07:00
dcache.c	mm: update callers to use HASH_ZERO flag	2017-07-06 16:24:33 -07:00
dcookies.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
direct-io.c	fs: add O_DIRECT and aio support for sending down write life time hints	2017-06-27 12:05:36 -06:00
drop_caches.c	…
eventfd.c	There has been a fair amount of activity in the docs tree this time	2017-07-03 21:13:25 -07:00
eventpoll.c	sched/wait: Disambiguate wq_entry->task_list and wq_head->task_list naming	2017-06-20 12:19:14 +02:00
exec.c	exec: Limit arg stack to at most 75% of _STK_LIM	2017-07-07 20:05:08 -07:00
fcntl.c	vfs: fix flock compat thinko	2017-07-07 13:48:18 -07:00
fhandle.c	fhandle: move compat syscalls from compat.c	2017-04-17 12:52:26 -04:00
file.c	fs/file.c: replace alloc_fdmem() with kvmalloc() alternative	2017-07-06 16:24:30 -07:00
file_table.c	fs: new infrastructure for writeback error handling and reporting	2017-07-06 07:02:25 -04:00
filesystems.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
fs-writeback.c	fs: add a blank lines on some kernel-doc comments	2017-05-16 08:44:10 -03:00
fs_pin.c	sched/wait: Disambiguate wq_entry->task_list and wq_head->task_list naming	2017-06-20 12:19:14 +02:00
fs_struct.c	sched/headers: Prepare for new header dependencies before moving code to <linux/sched/task.h>	2017-03-02 08:42:35 +01:00
inode.c	mm: update callers to use HASH_ZERO flag	2017-07-06 16:24:33 -07:00
internal.h	Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-05-09 09:12:53 -07:00
ioctl.c	sched/headers: Prepare for the reduction of <linux/sched.h>'s signal API dependency	2017-03-02 08:42:37 +01:00
iomap.c	fs: add O_DIRECT and aio support for sending down write life time hints	2017-06-27 12:05:36 -06:00
libfs.c	fs: convert __generic_file_fsync to use errseq_t based reporting	2017-07-06 07:02:29 -04:00
locks.c	fs/locks: pass kernel struct flock to fcntl_getlk/setlk	2017-05-27 06:07:19 -04:00
mbcache.c	mbcache: document that "find" functions only return reusable entries	2016-12-03 15:55:01 -05:00
mount.h	mnt: In propgate_umount handle visiting mounts in any order	2017-05-23 08:41:16 -05:00
mpage.c	There has been a fair amount of activity in the docs tree this time	2017-07-03 21:13:25 -07:00
namei.c	Merge remote-tracking branch 'mauro-exp/docbook3' into death-to-docbook	2017-05-18 11:03:08 -06:00
namespace.c	mm: update callers to use HASH_ZERO flag	2017-07-06 16:24:33 -07:00
no-block.c	…
nsfs.c	ns: allow ns_entries to have custom symlink content	2017-05-08 17:15:12 -07:00
open.c	Writeback error handling fixes (pile #2)	2017-07-07 19:38:17 -07:00
pipe.c	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
pnode.c	mnt: Make propagate_umount less slow for overlapping mount propagation trees	2017-05-23 08:41:17 -05:00
pnode.h	mnt: Tuck mounts under others instead of creating shadow/side mounts.	2017-02-04 00:01:06 +13:00
posix_acl.c	sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>	2017-03-02 08:42:31 +01:00
proc_namespace.c	sched/headers: Prepare to move the task_lock()/unlock() APIs to <linux/sched/task.h>	2017-03-02 08:42:38 +01:00
read_write.c	Merge branch 'work.read_write' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-07-05 14:35:57 -07:00
readdir.c	readdir: move compat syscalls from compat.c	2017-04-17 12:52:24 -04:00
select.c	Merge branch 'misc.compat' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-07-06 20:57:13 -07:00
seq_file.c	mm: introduce kv[mz]alloc helpers	2017-05-08 17:15:12 -07:00
signalfd.c	sched/wait: Rename wait_queue_t => wait_queue_entry_t	2017-06-20 12:18:27 +02:00
splice.c	fs: implement vfs_iter_write using do_iter_write	2017-06-29 17:49:23 -04:00
stack.c	…
stat.c	ufs: restore maintaining ->i_blocks	2017-06-09 16:28:01 -04:00
statfs.c	compat statfs: switch to copy_to_user()	2017-06-04 13:51:34 -04:00
super.c	bdi: Drop 'parent' argument from bdi_register[_va]()	2017-04-20 12:09:55 -06:00
sync.c	fs: remove call_fsync helper function	2017-07-05 18:44:23 -04:00
timerfd.c	timerfd: Use get_itimerspec64() and put_itimerspec64()	2017-06-30 04:14:38 -04:00
userfaultfd.c	mm/hugetlb: add size parameter to huge_pte_offset()	2017-07-06 16:24:34 -07:00
utimes.c	utimes: move compat syscalls from compat.c	2017-04-17 12:52:23 -04:00
xattr.c	treewide: use kv[mz]alloc* rather than opencoded variants	2017-05-08 17:15:13 -07:00