Thomas Graf fe6a043c53 rhashtable: rhashtable_remove() must unlink in both tbl and future_tbl ... As removals can occur during resizes, entries may be referred to from both tbl and future_tbl when the removal is requested. Therefore rhashtable_remove() must unlink the entry in both tables if this is the case. The existing code did search both tables but stopped when it hit the first match. Failing to unlink in both tables resulted in use after free. Fixes: 97defe1ecf ("rhashtable: Per bucket locks & deferred expansion/shrinking") Reported-by: Ying Xue <ying.xue@windriver.com> Signed-off-by: Thomas Graf <tgraf@suug.ch> Signed-off-by: David S. Miller <davem@davemloft.net>		2015-01-26 11:56:34 -08:00
..
fonts	fonts: Add 6x10 font	2014-10-09 11:35:48 +03:00
lz4
lzo	lzo: check for length overrun in variable length encoding.	2014-09-28 11:08:01 +02:00
mpi
raid6	lib/raid6: Add log level to printks	2014-10-14 13:08:29 +11:00
reed_solomon
xz
zlib_deflate
zlib_inflate
.gitignore
argv_split.c
asn1_decoder.c
assoc_array.c	assoc_array: Include rcupdate.h for call_rcu() definition	2015-01-07 16:08:41 +00:00
atomic64_test.c
atomic64.c	locking,arch: Rewrite generic atomic support	2014-08-14 12:48:14 +02:00
audit.c	syscalls: implement execveat() system call	2014-12-13 12:42:51 -08:00
average.c
bcd.c
bch.c
bitmap.c	Driver core patches for 3.19-rc1	2014-12-14 16:10:09 -08:00
bitrev.c
bsearch.c
btree.c
bug.c	lib/bug: Use RCU list ops for module_bug_list	2014-11-11 17:07:46 +10:30
build_OID_registry
bust_spinlocks.c
check_signature.c
checksum.c
clz_ctz.c
clz_tab.c
cmdline.c	lib: Add a generic cmdline parse function parse_option_str	2014-10-03 18:40:58 +01:00
compat_audit.c
cordic.c
cpu_rmap.c
cpu-notifier-error-inject.c
cpumask.c
crc7.c
crc8.c
crc16.c
crc32.c
crc32defs.h
crc-ccitt.c
crc-itu-t.c
crc-t10dif.c
ctype.c
debug_locks.c
debugobjects.c
dec_and_lock.c
decompress_bunzip2.c	decompress_bunzip2: off by one in get_next_block()	2014-12-13 12:42:52 -08:00
decompress_inflate.c	initramfs: support initramfs that is bigger than 2GiB	2014-08-08 15:57:26 -07:00
decompress_unlz4.c	initramfs: support initramfs that is bigger than 2GiB	2014-08-08 15:57:26 -07:00
decompress_unlzma.c	initramfs: support initramfs that is bigger than 2GiB	2014-08-08 15:57:26 -07:00
decompress_unlzo.c	initramfs: support initramfs that is bigger than 2GiB	2014-08-08 15:57:26 -07:00
decompress_unxz.c	initramfs: support initramfs that is bigger than 2GiB	2014-08-08 15:57:26 -07:00
decompress.c	lib/decompress.c: consistency of compress formats for kernel image	2014-12-13 12:42:52 -08:00
devres.c	devres: support sizes greater than an unsigned long	2014-11-07 10:09:07 -08:00
digsig.c
div64.c
dma-debug.c	dma-debug: prevent early callers from crashing	2014-12-10 17:41:02 -08:00
dump_stack.c
dynamic_debug.c	printk: add and use LOGLEVEL_<level> defines for KERN_<LEVEL> equivalents	2014-12-10 17:41:11 -08:00
dynamic_queue_limits.c
earlycpio.c
extable.c
fault-inject.c	fault-inject: add ratelimit option	2014-12-13 12:42:52 -08:00
fdt_empty_tree.c
fdt_ro.c
fdt_rw.c
fdt_strerror.c
fdt_sw.c
fdt_wip.c
fdt.c
find_last_bit.c
find_next_bit.c
flex_array.c
flex_proportions.c	proportions: add @gfp to init functions	2014-09-08 09:51:30 +09:00
gcd.c
gen_crc32table.c
genalloc.c	lib/genalloc.c: export devm_gen_pool_create() for modules	2014-12-03 09:36:04 -08:00
glob.c
halfmd4.c
hexdump.c	Provide a binary to hex conversion function	2014-09-16 17:36:01 +01:00
hweight.c	Make ARCH_HAS_FAST_MULTIPLIER a real config variable	2014-09-13 11:14:53 -07:00
idr.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial	2014-10-07 21:16:26 -04:00
inflate.c
int_sqrt.c
interval_tree_test.c
interval_tree.c
iomap_copy.c
iomap.c
iommu-helper.c
ioremap.c
iovec.c	bury memcpy_toiovec()	2014-12-09 16:29:11 -05:00
irq_regs.c
is_single_threaded.c
jedec_ddr_data.c
kasprintf.c
Kconfig	Make ARCH_HAS_FAST_MULTIPLIER a real config variable	2014-09-13 11:14:53 -07:00
Kconfig.debug	mm/page_owner: keep track of page owners	2014-12-13 12:42:48 -08:00
Kconfig.kgdb	kdb: Allow access to sensitive commands to be restricted by default	2014-11-11 09:31:52 -06:00
Kconfig.kmemcheck
kfifo.c	kfifo: use BUG_ON	2014-08-08 15:57:25 -07:00
klist.c
kobject_uevent.c
kobject.c	kobject: fix NULL pointer derefernce in kobj_child_ns_ops	2014-11-07 10:52:19 -08:00
kstrtox.c
kstrtox.h
lcm.c	lib/lcm.c: lcm(n,0)=lcm(0,n) is 0, not n	2014-12-10 17:41:11 -08:00
libcrc32c.c	crypto: LLVMLinux: Remove VLAIS usage from libcrc32c.c	2014-10-14 10:51:23 +02:00
list_debug.c
list_sort.c
llist.c
locking-selftest-hardirq.h
locking-selftest-mutex.h
locking-selftest-rlock-hardirq.h
locking-selftest-rlock-softirq.h
locking-selftest-rlock.h
locking-selftest-rsem.h
locking-selftest-softirq.h
locking-selftest-spin-hardirq.h
locking-selftest-spin-softirq.h
locking-selftest-spin.h
locking-selftest-wlock-hardirq.h
locking-selftest-wlock-softirq.h
locking-selftest-wlock.h
locking-selftest-wsem.h
locking-selftest.c	locking/lockdep: Revert qrwlock recusive stuff	2014-10-03 06:09:30 +02:00
lockref.c
lru_cache.c
Makefile	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2014-12-11 14:27:06 -08:00
md5.c
memory-notifier-error-inject.c
memweight.c
net_utils.c
nlattr.c
notifier-error-inject.c
notifier-error-inject.h
of-reconfig-notifier-error-inject.c
oid_registry.c
parser.c
pci_iomap.c
percpu_counter.c	percpu_counter: add @gfp to percpu_counter_init()	2014-09-08 09:51:29 +09:00
percpu_ida.c
percpu_test.c
percpu-refcount.c	percpu_ref: make INIT_ATOMIC and switch_to_atomic() sticky	2014-09-24 13:31:50 -04:00
plist.c
pm-notifier-error-inject.c
proportions.c	proportions: add @gfp to init functions	2014-09-08 09:51:30 +09:00
radix-tree.c
random32.c	random32: improvements to prandom_bytes	2014-08-24 18:36:01 -07:00
ratelimit.c
rational.c
rbtree_test.c
rbtree.c	lib/rbtree.c: fix typo in comment of __rb_insert()	2014-08-08 15:57:24 -07:00
reciprocal_div.c
rhashtable.c	rhashtable: rhashtable_remove() must unlink in both tbl and future_tbl	2015-01-26 11:56:34 -08:00
scatterlist.c	lib/scatterlist: fix memory leak with scsi-mq	2014-10-28 10:27:10 -06:00
seq_buf.c	seq_buf: Move the seq_buf code to lib/	2014-11-19 22:01:20 -05:00
sha1.c
show_mem.c	lib/show_mem.c: add cma reserved information	2014-12-18 19:08:10 -08:00
smp_processor_id.c
sort.c
stmp_device.c
string_helpers.c	lib / string_helpers: introduce string_escape_mem()	2014-10-14 02:18:26 +02:00
string.c	This adds a memzero_explicit() call which is guaranteed not to be	2014-10-24 12:33:32 -07:00
strncpy_from_user.c
strnlen_user.c
swiotlb.c
syscall.c
test_bpf.c	test: bpf: expand DIV_KX to DIV_MOD_KX	2014-12-08 20:23:22 -05:00
test_firmware.c
test_module.c
test_user_copy.c
test-kstrtox.c
test-string_helpers.c	lib / string_helpers: introduce string_escape_mem()	2014-10-14 02:18:26 +02:00
textsearch.c	lib/textsearch.c: remove textsearch_put reference from comments	2014-10-14 02:18:14 +02:00
timerqueue.c
ts_bm.c
ts_fsm.c
ts_kmp.c
ucs2_string.c
usercopy.c
uuid.c
vsprintf.c	lib/vsprintf: add %*pE[achnops] format specifier	2014-10-14 02:18:26 +02:00