Theodore Ts'o 3897b4ae1f ext4: fix a potential fiemap/page fault deadlock w/ inline_data ... commit 2b08b1f12cd664dc7d5c84ead9ff25ae97ad5491 upstream. The ext4_inline_data_fiemap() function calls fiemap_fill_next_extent() while still holding the xattr semaphore. This is not necessary and it triggers a circular lockdep warning. This is because fiemap_fill_next_extent() could trigger a page fault when it writes into page which triggers a page fault. If that page is mmaped from the inline file in question, this could very well result in a deadlock. This problem can be reproduced using generic/519 with a file system configuration which has the inline_data feature enabled. Signed-off-by: Theodore Ts'o <tytso@mit.edu> Cc: stable@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-01-16 22:16:12 +01:00
..
9p	v9fs_dir_readdir: fix double-free on p9stat_read error	2018-12-01 09:46:33 +01:00
adfs
affs	affs_lookup(): close a race with affs_remove_link()	2018-05-30 07:48:51 +02:00
afs
autofs4	autofs: fix autofs_sbi() does not check super block type	2018-09-19 22:49:00 +02:00
befs
bfs	bfs: add sanity check at bfs_fill_super()	2018-12-01 09:46:33 +01:00
btrfs	btrfs: tree-checker: Fix misleading group system information	2019-01-16 22:16:10 +01:00
cachefiles	fscache, cachefiles: remove redundant variable 'cache'	2018-12-17 21:55:12 +01:00
ceph	ceph: don't update importing cap's mseq when handing cap export	2019-01-13 10:05:33 +01:00
cifs	cifs: Fix potential OOB access of lock element array	2019-01-16 22:16:10 +01:00
coda
configfs	configfs: replace strncpy with memcpy	2018-11-21 09:27:44 +01:00
cramfs	Cramfs: fix abad comparison when wrap-arounds occur	2018-11-21 09:27:37 +01:00
debugfs
devpts
dlm	dlm: memory leaks on error path in dlm_user_request()	2019-01-13 10:05:33 +01:00
ecryptfs	do d_instantiate/unlock_new_inode combinations safely	2018-05-30 07:48:52 +02:00
efivarfs
efs
exofs	fs/exofs: fix potential memory leak in mount option parsing	2018-11-27 16:08:00 +01:00
exportfs	exportfs: do not read dentry after free	2018-12-17 21:55:10 +01:00
ext2	ext2: fix potential use after free	2018-12-13 09:21:27 +01:00
ext4	ext4: fix a potential fiemap/page fault deadlock w/ inline_data	2019-01-16 22:16:12 +01:00
f2fs	f2fs: fix a panic caused by NULL flush_cmd_control	2018-12-21 14:09:51 +01:00
fat	fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters()	2018-11-10 07:41:40 -08:00
freevxfs
fscache	fscache: fix race between enablement and dropping of object	2018-12-17 21:55:11 +01:00
fuse	fuse: fix leaked notify reply	2018-11-21 09:27:44 +01:00
gfs2	gfs2: Fix loop in gfs2_rbm_find	2019-01-13 10:05:33 +01:00
hfs	hfs: do not free node before using	2018-12-17 21:55:12 +01:00
hfsplus	hfsplus: do not free node before using	2018-12-17 21:55:12 +01:00
hostfs
hpfs
hugetlbfs	hugetlbfs: fix bug in pgoff overflow checking	2018-12-17 21:55:15 +01:00
isofs
jbd2	jbd2: fix use after free in jbd2_log_do_checkpoint()	2018-11-21 09:27:34 +01:00
jffs2	jffs2: free jffs2_sb_info through jffs2_kill_sb()	2018-11-21 09:27:30 +01:00
jfs	jfs: Fix inconsistency between memory allocation and ea_buf->max_size	2018-08-09 12:19:28 +02:00
kernfs	kernfs: Replace strncpy with memcpy	2018-12-13 09:21:29 +01:00
lockd	lockd: fix access beyond unterminated strings in prints	2018-11-21 09:27:36 +01:00
logfs
minix
ncpfs	staging: ncpfs: memory corruption in ncp_read_kernel()	2018-03-28 18:40:15 +02:00
nfs	NFSv4.1: Fix the r/wsize checking	2018-11-21 09:27:35 +01:00
nfs_common
nfsd	nfsd: fix corrupted reply to badly ordered compound	2018-10-10 08:52:07 +02:00
nilfs2	do d_instantiate/unlock_new_inode combinations safely	2018-05-30 07:48:52 +02:00
nls
notify	fanotify: fix logic of events on child	2018-04-24 09:32:11 +02:00
ntfs
ocfs2	ocfs2: fix potential use after free	2018-12-17 21:55:12 +01:00
omfs
openpromfs
overlayfs	ovl: proper cleanup of workdir	2018-09-15 09:40:41 +02:00
proc	proc: do not access cmdline nor environ from file-backed areas	2018-12-17 21:55:17 +01:00
pstore	pstore: Convert console write to use ->write_buf	2018-12-17 21:55:12 +01:00
qnx4
qnx6
quota	fs/quota: Fix spectre gadget in do_quotactl	2018-09-09 20:04:36 +02:00
ramfs
reiserfs	reiserfs: propagate errors from fill_with_dentries() properly	2018-11-27 16:08:00 +01:00
romfs
squashfs	squashfs: more metadata hardenings	2018-08-06 16:24:42 +02:00
sysfs	scsi: sysfs: Introduce sysfs_{un,}break_active_protection()	2018-09-05 09:18:40 +02:00
sysv	sysv: return 'err' instead of 0 in __sysv_write_inode	2018-12-17 21:55:09 +01:00
tracefs
ubifs	ubifs: Check for name being NULL while mounting	2018-10-13 09:11:34 +02:00
udf	udf: Detect incorrect directory size	2018-07-03 11:21:34 +02:00
ufs	do d_instantiate/unlock_new_inode combinations safely	2018-05-30 07:48:52 +02:00
xfs	xfs: fix incorrect log_flushed on fsync	2018-06-13 16:15:27 +02:00
aio.c	aio: fix spectre gadget in lookup_ioctx	2018-12-21 14:09:50 +01:00
anon_inodes.c
attr.c
bad_inode.c
binfmt_aout.c
binfmt_elf.c	fs, elf: make sure to page align bss in load_elf_library	2018-11-21 09:27:41 +01:00
binfmt_elf_fdpic.c
binfmt_em86.c
binfmt_flat.c
binfmt_misc.c	fs/binfmt_misc.c: do not allow offset overflow	2018-07-03 11:21:26 +02:00
binfmt_script.c
block_dev.c
buffer.c
char_dev.c
compat.c
compat_binfmt_elf.c
compat_ioctl.c	fs: compat: Remove warning from COMPATIBLE_IOCTL	2018-04-08 11:51:57 +02:00
coredump.c
dax.c
dcache.c	fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot()	2018-09-15 09:40:38 +02:00
dcookies.c
direct-io.c
drop_caches.c
eventfd.c
eventpoll.c
exec.c	mm: replace get_user_pages() write/force parameters with gup_flags	2018-12-17 21:55:16 +01:00
fcntl.c
fhandle.c
file.c
file_table.c
filesystems.c
fs-writeback.c	bdi: Fix oops in wb_workfn()	2018-05-16 10:06:51 +02:00
fs_pin.c
fs_struct.c
inode.c	Fix up non-directory creation in SGID directories	2018-07-17 11:31:43 +02:00
internal.h
ioctl.c
Kconfig
Kconfig.binfmt
libfs.c
locks.c
Makefile
mbcache.c
mount.h
mpage.c
namei.c	namei: allow restricted O_CREAT of FIFOs and regular files	2018-12-01 09:46:41 +01:00
namespace.c	mount: Prevent MNT_DETACH from disconnecting locked mounts	2018-11-21 09:27:44 +01:00
no-block.c
nsfs.c
open.c
pipe.c	pipe: cap initial pipe capacity according to pipe-max-size limit	2018-05-26 08:48:51 +02:00
pnode.c
pnode.h
posix_acl.c
proc_namespace.c
read_write.c
readdir.c
select.c
seq_file.c
signalfd.c
splice.c
stack.c
stat.c
statfs.c
super.c	sget(): handle failures of register_shrinker()	2018-03-03 10:19:41 +01:00
sync.c
timerfd.c
userfaultfd.c
utimes.c
xattr.c	getxattr: use correct xattr length	2018-09-09 20:04:36 +02:00