Sasha Levin 1b99874ddd rds: prevent dereference of a NULL device ... [ Upstream commit c2349758acf1874e4c2b93fe41d072336f1a31d0 ] Binding might result in a NULL device, which is dereferenced causing this BUG: [ 1317.260548] BUG: unable to handle kernel NULL pointer dereference at 000000000000097 4 [ 1317.261847] IP: [<ffffffff84225f52>] rds_ib_laddr_check+0x82/0x110 [ 1317.263315] PGD 418bcb067 PUD 3ceb21067 PMD 0 [ 1317.263502] Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC [ 1317.264179] Dumping ftrace buffer: [ 1317.264774] (ftrace buffer empty) [ 1317.265220] Modules linked in: [ 1317.265824] CPU: 4 PID: 836 Comm: trinity-child46 Tainted: G W 3.13.0-rc4- next-20131218-sasha-00013-g2cebb9b-dirty #4159 [ 1317.267415] task: ffff8803ddf33000 ti: ffff8803cd31a000 task.ti: ffff8803cd31a000 [ 1317.268399] RIP: 0010:[<ffffffff84225f52>] [<ffffffff84225f52>] rds_ib_laddr_check+ 0x82/0x110 [ 1317.269670] RSP: 0000:ffff8803cd31bdf8 EFLAGS: 00010246 [ 1317.270230] RAX: 0000000000000000 RBX: ffff88020b0dd388 RCX: 0000000000000000 [ 1317.270230] RDX: ffffffff8439822e RSI: 00000000000c000a RDI: 0000000000000286 [ 1317.270230] RBP: ffff8803cd31be38 R08: 0000000000000000 R09: 0000000000000000 [ 1317.270230] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1317.270230] R13: 0000000054086700 R14: 0000000000a25de0 R15: 0000000000000031 [ 1317.270230] FS: 00007ff40251d700(0000) GS:ffff88022e200000(0000) knlGS:000000000000 0000 [ 1317.270230] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b [ 1317.270230] CR2: 0000000000000974 CR3: 00000003cd478000 CR4: 00000000000006e0 [ 1317.270230] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1317.270230] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000090602 [ 1317.270230] Stack: [ 1317.270230] 0000000054086700 5408670000a25de0 5408670000000002 0000000000000000 [ 1317.270230] ffffffff84223542 00000000ea54c767 0000000000000000 ffffffff86d26160 [ 1317.270230] ffff8803cd31be68 ffffffff84223556 ffff8803cd31beb8 ffff8800c6765280 [ 1317.270230] Call Trace: [ 1317.270230] [<ffffffff84223542>] ? rds_trans_get_preferred+0x42/0xa0 [ 1317.270230] [<ffffffff84223556>] rds_trans_get_preferred+0x56/0xa0 [ 1317.270230] [<ffffffff8421c9c3>] rds_bind+0x73/0xf0 [ 1317.270230] [<ffffffff83e4ce62>] SYSC_bind+0x92/0xf0 [ 1317.270230] [<ffffffff812493f8>] ? context_tracking_user_exit+0xb8/0x1d0 [ 1317.270230] [<ffffffff8119313d>] ? trace_hardirqs_on+0xd/0x10 [ 1317.270230] [<ffffffff8107a852>] ? syscall_trace_enter+0x32/0x290 [ 1317.270230] [<ffffffff83e4cece>] SyS_bind+0xe/0x10 [ 1317.270230] [<ffffffff843a6ad0>] tracesys+0xdd/0xe2 [ 1317.270230] Code: 00 8b 45 cc 48 8d 75 d0 48 c7 45 d8 00 00 00 00 66 c7 45 d0 02 00 89 45 d4 48 89 df e8 78 49 76 ff 41 89 c4 85 c0 75 0c 48 8b 03 <80> b8 74 09 00 00 01 7 4 06 41 bc 9d ff ff ff f6 05 2a b6 c2 02 [ 1317.270230] RIP [<ffffffff84225f52>] rds_ib_laddr_check+0x82/0x110 [ 1317.270230] RSP <ffff8803cd31bdf8> [ 1317.270230] CR2: 0000000000000974 Signed-off-by: Sasha Levin <sasha.levin@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2014-01-15 15:28:49 -08:00
..
9p	9p: send uevent after adding/removing mount_tag attribute	2013-12-04 10:57:19 -08:00
802	net/802/mrp: fix lockdep splat	2013-05-14 13:02:30 -07:00
8021q	net: vlan: fix nlmsg size calculation in vlan_get_size()	2013-11-04 04:31:02 -08:00
appletalk	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
atm	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
ax25	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
batman-adv	batman-adv: set up network coding packet handlers during module init	2013-11-20 12:27:47 -08:00
bluetooth	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
bridge	bridge: flush br's address entry in fdb when remove the bridge dev	2013-12-08 07:29:26 -08:00
caif	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
can	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-05-01 17:51:54 -07:00
ceph	libceph: add function to ensure notifies are complete	2014-01-09 12:24:26 -08:00
core	net: unix: allow set_peek_off to fail	2014-01-15 15:28:47 -08:00
dcb	rtnetlink: Remove passing of attributes into rtnl_doit functions	2013-03-22 10:31:16 -04:00
dccp	net:dccp: do not report ICMP redirects to user space	2013-10-13 16:08:30 -07:00
decnet	decnet: remove duplicated include from dn_table.c	2013-04-07 17:12:01 -04:00
dns_resolver
dsa	dsa: fix freeing of sparse port allocation	2013-03-25 12:23:41 -04:00
ethernet	net: add ETH_P_802_3_MIN	2013-03-28 01:20:42 -04:00
ieee802154	inet: prevent leakage of uninitialized memory to user in recv syscalls	2013-12-08 07:29:25 -08:00
ipv4	net: inet_diag: zero out uninitialized idiag_{src,dst} fields	2014-01-15 15:28:48 -08:00
ipv6	ipv6: always set the new created dst's from in ip6_rt_copy	2014-01-15 15:28:48 -08:00
ipx	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
irda	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
iucv	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
key	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
l2tp	inet: fix addr_len/msg->msg_namelen assignment in recv_error and rxpmtu functions	2013-12-08 07:29:25 -08:00
lapb
llc	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
mac80211	mac80211: don't attempt to reorder multicast frames	2013-12-20 07:45:09 -08:00
mac802154	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2013-04-30 03:55:20 -04:00
netfilter	netfilter: push reasm skb through instead of original frag skbs	2013-12-08 07:29:25 -08:00
netlabel	netlabel: improve domain mapping validation	2013-05-19 14:49:55 -07:00
netlink	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
netrom	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
nfc	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
openvswitch	openvswitch: Remove unneeded ovs_netdev_get_ifindex()	2013-04-30 00:19:11 -04:00
packet	packet: fix send path when running with proto == 0	2014-01-15 15:28:46 -08:00
phonet	inet: prevent leakage of uninitialized memory to user in recv syscalls	2013-12-08 07:29:25 -08:00
rds	rds: prevent dereference of a NULL device	2014-01-15 15:28:49 -08:00
rfkill	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next	2013-04-22 14:58:14 -04:00
rose	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
rxrpc	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
sched	net_sched: htb: fix a typo in htb_change_class()	2013-10-13 16:08:29 -07:00
sctp	sctp: Perform software checksum if packet has to be fragmented.	2013-11-04 04:31:04 -08:00
sunrpc	SUNRPC: Fix a data corruption issue when retransmitting RPC calls	2013-11-29 11:11:52 -08:00
tipc	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
unix	net: unix: allow bind to fail on mutex lock	2014-01-15 15:28:48 -08:00
vmw_vsock	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
wimax
wireless	radiotap: fix bitmap-end-finding buffer overrun	2014-01-09 12:24:23 -08:00
x25	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
xfrm	xfrm: force a garbage collection after deleting a policy	2013-05-31 17:30:07 -07:00
compat.c	net: clamp ->msg_namelen instead of returning an error	2013-12-08 07:29:25 -08:00
Kconfig	netlink: kconfig: move mmap i/o into netlink kconfig	2013-05-01 15:02:42 -04:00
Makefile	VSOCK: Introduce VM Sockets	2013-02-10 19:41:08 -05:00
nonet.c
socket.c	net: clamp ->msg_namelen instead of returning an error	2013-12-08 07:29:25 -08:00
sysctl_net.c	net: Update the sysctl permissions handler to test effective uid/gid	2013-10-13 16:08:34 -07:00