Jan Kara a61d90d75d jbd: fix race in buffer processing in commit code ... In commit code, we scan buffers attached to a transaction. During this scan, we sometimes have to drop j_list_lock and then we recheck whether the journal buffer head didn't get freed by journal_try_to_free_buffers(). But checking for buffer_jbd(bh) isn't enough because a new journal head could get attached to our buffer head. So add a check whether the journal head remained the same and whether it's still at the same transaction and list. This is a nasty bug and can cause problems like memory corruption (use after free) or trigger various assertions in JBD code (observed). Signed-off-by: Jan Kara <jack@suse.cz> Cc: <stable@kernel.org> Cc: <linux-ext4@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2009-06-09 16:59:03 -07:00
..
9p	Fix a leak in failure exit in 9p ->get_sb()	2009-05-09 10:49:40 -04:00
adfs
affs	Fix races around the access to ->s_options	2009-05-09 10:51:34 -04:00
afs	Fix races around the access to ->s_options	2009-05-09 10:51:34 -04:00
autofs	Fix autofs_expire()	2009-04-20 23:01:15 -04:00
autofs4	autofs4: remove hashed check in validate_wait()	2009-06-09 16:59:03 -07:00
befs
bfs
btrfs	Merge git://git.kernel.org/pub/scm/linux/kernel/git/mason/btrfs-unstable	2009-06-05 11:54:28 -07:00
cachefiles	CacheFiles: Fixup renamed filenames in comments in internal.h	2009-05-27 10:20:13 -07:00
cifs	[CIFS] Avoid open on possible directories since Samba now rejects them	2009-05-23 18:57:25 +00:00
coda
configfs	configfs: Fix Trivial Warning in fs/configfs/symlink.c	2009-04-21 12:59:21 -07:00
cramfs
debugfs
devpts	devpts: correctly set default options	2009-05-15 08:03:23 -07:00
dlm
ecryptfs	Convert obvious places to deactivate_locked_super()	2009-05-09 10:49:40 -04:00
efs
exofs
exportfs
ext2	ext2: missing unlock in ext2_quota_write()	2009-04-27 16:49:52 +02:00
ext3
ext4	ext4: Fix race in ext4_inode_info.i_cached_extent	2009-05-15 09:07:28 -04:00
fat
freevxfs
fscache	FS-Cache: Fixup renamed filenames in comments in internal.h	2009-05-27 10:20:13 -07:00
fuse	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse	2009-05-13 16:32:57 -07:00
gfs2	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6	2009-05-10 10:49:08 -07:00
hfs
hfsplus
hostfs
hpfs	Fix races around the access to ->s_options	2009-05-09 10:51:34 -04:00
hppfs
hugetlbfs	Remove implementation of readpage from the hugetlbfs_aops	2009-05-13 08:04:45 -07:00
isofs
jbd	jbd: fix race in buffer processing in commit code	2009-06-09 16:59:03 -07:00
jbd2
jffs2	jffs2: Fix corruption when flash erase/write failure	2009-05-29 10:44:46 +01:00
jfs
lockd	lockd: fix list corruption on lockd restart	2009-05-06 17:19:36 -04:00
minix
ncpfs	ncpfs: use memdup_user()	2009-04-20 23:02:51 -04:00
nfs	NFSv4: Fix the case where NFSv4 renewal fails	2009-05-26 14:51:00 -04:00
nfs_common
nfsd	nfsd: fix hung up of nfs client while sync write data to nfs server	2009-05-27 17:40:06 -04:00
nilfs2	nilfs2: fix bh leak in nilfs_cpfile_delete_checkpoints function	2009-05-30 22:07:50 +09:00
nls
notify	inotify: use GFP_NOFS in kernel_event() to work around a lockdep false-positive	2009-05-06 16:36:09 -07:00
ntfs
ocfs2	ocfs2: Use nd_set_link().	2009-05-09 10:49:40 -04:00
omfs
openpromfs
partitions
proc	procfs: make errno values consistent when open pident vs exit(2) race occurs	2009-05-29 08:40:02 -07:00
qnx4
quota	quota: remove obsolete comments in fs/quota/Makefile	2009-04-27 16:49:52 +02:00
ramfs
reiserfs	reiserfs: fixup perms when xattrs are disabled	2009-05-17 11:45:45 -07:00
romfs	ROMFS: romfs_dev_read() error ignored	2009-05-09 10:49:41 -04:00
smbfs
squashfs	Squashfs: cody tidying, remove commented out line in Makefile	2009-05-13 03:25:20 +01:00
sysfs	sysfs: file.c: use create_singlethread_workqueue()	2009-05-28 14:24:07 -07:00
sysv
ubifs	Convert obvious places to deactivate_locked_super()	2009-05-09 10:49:40 -04:00
udf
ufs	switch ufs directories to ufs_sync_file()	2009-05-09 10:49:42 -04:00
xfs	Merge branch 'for-linus' of git://oss.sgi.com/xfs/xfs	2009-06-02 09:47:21 -07:00
aio.c
anon_inodes.c
attr.c
bad_inode.c
binfmt_aout.c
binfmt_elf_fdpic.c	ptrace: s/parent/real_parent/ in binfmt_elf_fdpic.c	2009-05-02 15:36:10 -07:00
binfmt_elf.c
binfmt_em86.c
binfmt_flat.c	flat: fix data sections alignment	2009-05-29 08:40:02 -07:00
binfmt_misc.c
binfmt_script.c
binfmt_som.c
bio-integrity.c
bio.c	bio: fix memcpy corruption in bio_copy_user_iov()	2009-04-28 20:24:29 +02:00
block_dev.c
buffer.c	Fix nobh_truncate_page() to not pass stack garbage to get_block()	2009-06-06 06:17:25 -04:00
char_dev.c
compat_binfmt_elf.c
compat_ioctl.c	fs/compat_ioctl: fix build when !BLOCK	2009-04-20 23:01:16 -04:00
compat.c	do_execve() must not clear fs->in_exec if it was set by another thread	2009-04-24 07:39:45 -07:00
dcache.c	fs: dcache fix LRU ordering	2009-05-09 10:49:40 -04:00
dcookies.c
direct-io.c
drop_caches.c
eventfd.c
eventpoll.c	epoll: fix size check in epoll_create()	2009-05-12 14:11:35 -07:00
exec.c	Switch open_exec() and sys_uselib() to do_open_filp()	2009-05-09 10:49:42 -04:00
fcntl.c	dup2: Fix return value with oldfd == newfd and invalid fd	2009-05-11 12:18:06 -07:00
fifo.c
file_table.c
file.c
filesystems.c	fs: Mark get_filesystem_list() as __init function.	2009-04-20 23:02:52 -04:00
fs_struct.c
fs-writeback.c
generic_acl.c
inode.c	integrity: fix IMA inode leak	2009-06-06 14:33:41 -07:00
internal.h
ioctl.c	fiemap: fix problem with setting FIEMAP_EXTENT_LAST	2009-05-06 16:36:09 -07:00
ioprio.c
Kconfig
Kconfig.binfmt
libfs.c	Convert obvious places to deactivate_locked_super()	2009-05-09 10:49:40 -04:00
locks.c
Makefile
mbcache.c
mpage.c
namei.c	Switch open_exec() and sys_uselib() to do_open_filp()	2009-05-09 10:49:42 -04:00
namespace.c	Fix races around the access to ->s_options	2009-05-09 10:51:34 -04:00
nfsctl.c
no-block.c
open.c	Switch open_exec() and sys_uselib() to do_open_filp()	2009-05-09 10:49:42 -04:00
pipe.c
pnode.c
pnode.h
posix_acl.c
read_write.c
read_write.h
readdir.c
select.c
seq_file.c
signalfd.c
splice.c
stack.c
stat.c	kill vfs_stat_fd / vfs_lstat_fd	2009-04-20 23:02:52 -04:00
super.c	NULL noise in fs/super.c:kill_bdev_super()	2009-05-09 10:49:41 -04:00
sync.c
timerfd.c
utimes.c
xattr_acl.c
xattr.c	xattr: use memdup_user()	2009-04-20 23:02:50 -04:00