android_kernel_google_msm/net/ceph
Ilya Dryomov 8458a84420 crush: fix a bug in tree bucket decode
commit 82cd003a77173c91b9acad8033fb7931dac8d751 upstream.

struct crush_bucket_tree::num_nodes is u8, so ceph_decode_8_safe()
should be used.  -Wconversion catches this, but I guess it went
unnoticed in all the noise it spews.  The actual problem (at least for
common crushmaps) isn't the u32 -> u8 truncation though - it's the
advancement by 4 bytes instead of 1 in the crushmap buffer.

Fixes: http://tracker.ceph.com/issues/2759

Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Reviewed-by: Josh Durgin <jdurgin@redhat.com>
Signed-off-by: Zefan Li <lizefan@huawei.com>
2015-10-22 09:20:07 +08:00
..
crush crush: fix memory leak when destroying tree buckets 2012-11-26 11:38:03 -08:00
Kconfig ceph: use kernel DNS resolver 2011-10-25 16:10:16 -07:00
Makefile
armor.c libceph: Fix base64-decoding when input ends in newline. 2011-03-15 09:14:02 -07:00
auth.c libceph: wrap auth methods in a mutex 2013-06-20 11:58:47 -07:00
auth_none.c libceph: Fix NULL pointer dereference in auth client code 2013-07-13 11:03:40 -07:00
auth_none.h
auth_x.c libceph: do not hard code max auth ticket len 2014-12-01 18:02:29 +08:00
auth_x.h libceph: add update_authorizer auth method 2013-06-20 11:58:46 -07:00
auth_x_protocol.h
buffer.c
ceph_common.c libceph: remove 'osdtimeout' option 2013-01-17 08:51:20 -08:00
ceph_fs.c ceph: fix file mode calculation 2011-07-19 11:25:04 -07:00
ceph_hash.c ceph: add dir_layout to inode 2011-01-12 15:15:12 -08:00
ceph_strings.c
crypto.c libceph: do not crash on large auth tickets 2015-02-02 17:05:20 +08:00
crypto.h libceph: fix crypto key null deref, memory leak 2012-11-26 11:38:42 -08:00
debugfs.c libceph: delay debugfs initialization until we learn global_id 2012-11-26 11:38:43 -08:00
messenger.c libceph: clear messenger auth_retry flag when we authenticate 2013-06-20 11:58:46 -07:00
mon_client.c libceph: gracefully handle large reply messages from the mon 2014-12-01 18:02:28 +08:00
msgpool.c libceph: initialize msgpool message types 2012-11-26 11:38:38 -08:00
osd_client.c libceph: resend all writes after the osdmap loses the full flag 2014-03-30 21:40:30 -07:00
osdmap.c crush: fix a bug in tree bucket decode 2015-10-22 09:20:07 +08:00
pagelist.c
pagevec.c libceph: fix handling of short returns from get_user_pages 2011-03-03 13:47:39 -08:00