Trond Myklebust 9c71f4c287 NFSv4.1: Fix a kfree() of uninitialised pointers in decode_cb_sequence_args ... commit d8ba1f971497c19cf80da1ea5391a46a5f9fbd41 upstream. If the call to decode_rc_list() fails due to a memory allocation error, then we need to truncate the array size to ensure that we only call kfree() on those pointer that were allocated. Reported-by: David Ramos <daramos@stanford.edu> Fixes: 4aece6a19c ("nfs41: cb_sequence xdr implementation") Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com> Signed-off-by: Zefan Li <lizefan@huawei.com>		2015-06-19 11:40:14 +08:00
..
9p	move d_rcu from overlapping d_child to overlapping d_alias	2015-04-14 17:33:58 +08:00
adfs
affs	move d_rcu from overlapping d_child to overlapping d_alias	2015-04-14 17:33:58 +08:00
afs
autofs4	move d_rcu from overlapping d_child to overlapping d_alias	2015-04-14 17:33:58 +08:00
befs
bfs
btrfs	Btrfs: fix fs corruption on transaction abort if device supports discard	2015-04-14 17:33:45 +08:00
cachefiles	fs: cachefiles: add support for large files in filesystem caching	2014-06-07 16:02:04 -07:00
ceph	move d_rcu from overlapping d_child to overlapping d_alias	2015-04-14 17:33:58 +08:00
cifs	move d_rcu from overlapping d_child to overlapping d_alias	2015-04-14 17:33:58 +08:00
coda	move d_rcu from overlapping d_child to overlapping d_alias	2015-04-14 17:33:58 +08:00
configfs	configfs: fix race between dentry put and lookup	2013-11-29 10:50:37 -08:00
cramfs
debugfs	move d_rcu from overlapping d_child to overlapping d_alias	2015-04-14 17:33:58 +08:00
devpts	devpts: plug the memory leak in kill_sb	2013-12-04 10:50:14 -08:00
dlm
ecryptfs	eCryptfs: Remove buggy and unnecessary write in file name decode routine	2015-04-14 17:33:43 +08:00
efs
exofs	ore: Fix wrong math in allocation of per device BIO	2014-02-13 11:51:11 -08:00
exportfs	move d_rcu from overlapping d_child to overlapping d_alias	2015-04-14 17:33:58 +08:00
ext2	ext2: Fix fs corruption in ext2_get_xip_mem()	2014-09-25 11:49:19 +08:00
ext3	ext3: Don't check quota format when there are no quota files	2015-02-02 17:05:00 +08:00
ext4	move d_rcu from overlapping d_child to overlapping d_alias	2015-04-14 17:33:58 +08:00
fat	fat: fix possible overflow for fat_clusters	2013-06-07 12:49:12 -07:00
freevxfs
fscache	fs/fscache/stats.c: fix memory leak	2013-05-07 19:51:55 -07:00
fuse	fuse: hotfix truncate_pagecache() issue	2014-03-11 16:10:04 -07:00
gfs2	GFS2: Fix incorrect invalidation for DIO/buffered I/O	2014-01-08 09:42:12 -08:00
hfs
hfsplus	hfsplus: fix potential overflow in hfsplus_file_truncate()	2013-04-25 21:19:54 -07:00
hostfs
hpfs	hpfs: deadlock and race in directory lseek()	2014-02-13 11:51:18 -08:00
hppfs
hugetlbfs	hugetlbfs: fix mmap failure in unaligned size request	2013-05-19 10:54:48 -07:00
isofs	isofs: Fix unchecked printing of ER records	2015-04-14 17:33:47 +08:00
jbd
jbd2	ext4/jbd2: don't wait (forever) for stale tid caused by wraparound	2014-03-11 16:10:05 -07:00
jffs2	jffs2: remove from wait queue after schedule()	2014-04-26 17:13:20 -07:00
jfs	jfs: fix readdir regression	2015-04-14 17:34:02 +08:00
lockd	lockd: Try to reconnect if statd has moved	2015-02-02 17:04:42 +08:00
logfs
minix
ncpfs	move d_rcu from overlapping d_child to overlapping d_alias	2015-04-14 17:33:58 +08:00
nfs	NFSv4.1: Fix a kfree() of uninitialised pointers in decode_cb_sequence_args	2015-06-19 11:40:14 +08:00
nfs_common
nfsd	nfsd: Fix slot wake up race in the nfsv4.1 callback code	2015-04-14 17:33:37 +08:00
nilfs2	nilfs2: fix deadlock of segment constructor during recovery	2015-04-14 17:34:04 +08:00
nls
notify	fsnotify: next_i is freed during fsnotify_unmount_inodes.	2015-04-14 17:34:03 +08:00
ntfs
ocfs2	move d_rcu from overlapping d_child to overlapping d_alias	2015-04-14 17:33:58 +08:00
omfs
openpromfs
proc	pagemap: do not leak physical addresses to non-privileged userspace	2015-04-14 17:34:02 +08:00
pstore
qnx4
qnx6
quota	quota: Fix race between dqput() and dquot_scan_active()	2014-03-11 16:10:02 -07:00
ramfs
reiserfs	reiserfs: fix race in readdir	2014-05-06 07:51:44 -07:00
romfs
squashfs
sysfs	sysfs: fix use after free in case of concurrent read/write and readdir	2013-05-07 19:51:54 -07:00
sysv
ubifs	UBIFS: fix free log space calculation	2015-02-02 17:04:36 +08:00
udf	udf: Check component length before reading it	2015-04-14 17:33:48 +08:00
ufs
xfs	xfs: underflow bug in xfs_attrlist_by_handle()	2013-12-20 07:34:19 -08:00
aio.c	aio: fix possible invalid memory access when DEBUG is enabled	2013-05-01 09:41:03 -07:00
anon_inodes.c
attr.c
bad_inode.c
binfmt_aout.c
binfmt_elf.c	x86, mm/ASLR: Fix stack randomization on 64-bit systems	2015-04-14 17:33:58 +08:00
binfmt_elf_fdpic.c
binfmt_em86.c	exec: use -ELOOP for max recursion depth	2013-03-28 12:12:28 -07:00
binfmt_flat.c
binfmt_misc.c	exec: use -ELOOP for max recursion depth	2013-03-28 12:12:28 -07:00
binfmt_script.c	exec: use -ELOOP for max recursion depth	2013-03-28 12:12:28 -07:00
binfmt_som.c
bio-integrity.c
bio.c	SCSI: sg: Fix user memory corruption when SG_IO is interrupted by a signal	2013-09-07 21:58:16 -07:00
block_dev.c	writeback: Fix periodic writeback after fs mount	2013-07-28 16:26:08 -07:00
buffer.c	vfs: fix data corruption when blocksize < pagesize for mmaped data	2015-02-02 17:04:52 +08:00
char_dev.c
compat.c
compat_binfmt_elf.c
compat_ioctl.c
dcache.c	deal with deadlock in d_walk()	2015-04-14 17:33:58 +08:00
dcookies.c
direct-io.c
drop_caches.c
eventfd.c
eventpoll.c
exec.c	exec/ptrace: fix get_dumpable() incorrect tests	2013-11-29 10:50:34 -08:00
fcntl.c
fhandle.c
fifo.c
file.c	fs/file.c:fdtable: avoid triggering OOMs from alloc_fdmem	2014-02-22 10:32:45 -08:00
file_table.c
filesystems.c
fs-writeback.c	writeback: fix a subtle race condition in I_DIRTY clearing	2015-04-14 17:33:41 +08:00
fs_struct.c
generic_acl.c
inode.c	vfs: Revert spurious fix to spinning prevention in prune_icache_sb	2013-04-16 21:27:26 -07:00
internal.h
ioctl.c
ioprio.c	block: Fix computation of merged request priority	2015-02-02 17:05:17 +08:00
Kconfig
Kconfig.binfmt
libfs.c	move d_rcu from overlapping d_child to overlapping d_alias	2015-04-14 17:33:58 +08:00
locks.c	locks: allow __break_lease to sleep even when break_time is 0	2014-05-13 14:11:31 +02:00
Makefile
mbcache.c
mount.h
mpage.c
namei.c	don't bugger nd->seq on set_root_rcu() from follow_dotdot_rcu()	2014-12-01 18:02:31 +08:00
namespace.c	mnt: Prevent pivot_root from creating a loop in the mount tree	2015-02-02 17:04:50 +08:00
no-block.c
open.c
pipe.c
pnode.c	get rid of propagate_umount() mistakenly treating slaves as busy.	2014-12-01 18:02:21 +08:00
pnode.h
posix_acl.c	posix_acl: handle NULL ACL in posix_acl_equiv_mode	2014-06-07 16:02:02 -07:00
proc_namespace.c
read_write.c
read_write.h
readdir.c
select.c
seq_file.c
signalfd.c
splice.c
stack.c
stat.c	VFS: make vfs_fstat() use f[get|put]_light()	2014-06-07 16:02:04 -07:00
statfs.c	vfs: allow O_PATH file descriptors for fstatfs()	2013-10-22 09:02:25 +01:00
super.c	fs: Fix theoretical division by 0 in super_cache_scan().	2015-02-02 17:04:48 +08:00
sync.c
timerfd.c
utimes.c
xattr.c
xattr_acl.c