mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-28 10:41:38 -04:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
Pull assorted fixes from Al Viro: "There'll be more - I'm trying to dig out from under the pile of mail (a couple of weeks of something flu-like ;-/) and there's several more things waiting for review; this is just the obvious stuff." * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs: zoran: racy refcount handling in vm_ops ->open()/->close() befs_readdir(): do not increment ->f_pos if filldir tells us to stop hpfs: deadlock and race in directory lseek() qnx6: qnx6_readdir() has a braino in pos calculation fix buffer leak after "scsi: saner replacements for ->proc_info()" vfs: Fix invalid ida_remove() call
This commit is contained in:
commit
6cf3c73620
7 changed files with 21 additions and 16 deletions
|
|
@ -265,8 +265,8 @@ befs_readdir(struct file *filp, void *dirent, filldir_t filldir)
|
|||
result = filldir(dirent, keybuf, keysize, filp->f_pos,
|
||||
(ino_t) value, d_type);
|
||||
}
|
||||
|
||||
filp->f_pos++;
|
||||
if (!result)
|
||||
filp->f_pos++;
|
||||
|
||||
befs_debug(sb, "<--- befs_readdir() filp->f_pos %Ld", filp->f_pos);
|
||||
|
||||
|
|
|
|||
|
|
@ -33,25 +33,27 @@ static loff_t hpfs_dir_lseek(struct file *filp, loff_t off, int whence)
|
|||
if (whence == SEEK_DATA || whence == SEEK_HOLE)
|
||||
return -EINVAL;
|
||||
|
||||
mutex_lock(&i->i_mutex);
|
||||
hpfs_lock(s);
|
||||
|
||||
/*printk("dir lseek\n");*/
|
||||
if (new_off == 0 || new_off == 1 || new_off == 11 || new_off == 12 || new_off == 13) goto ok;
|
||||
mutex_lock(&i->i_mutex);
|
||||
pos = ((loff_t) hpfs_de_as_down_as_possible(s, hpfs_inode->i_dno) << 4) + 1;
|
||||
while (pos != new_off) {
|
||||
if (map_pos_dirent(i, &pos, &qbh)) hpfs_brelse4(&qbh);
|
||||
else goto fail;
|
||||
if (pos == 12) goto fail;
|
||||
}
|
||||
mutex_unlock(&i->i_mutex);
|
||||
hpfs_add_pos(i, &filp->f_pos);
|
||||
ok:
|
||||
filp->f_pos = new_off;
|
||||
hpfs_unlock(s);
|
||||
return filp->f_pos = new_off;
|
||||
fail:
|
||||
mutex_unlock(&i->i_mutex);
|
||||
return new_off;
|
||||
fail:
|
||||
/*printk("illegal lseek: %016llx\n", new_off);*/
|
||||
hpfs_unlock(s);
|
||||
mutex_unlock(&i->i_mutex);
|
||||
return -ESPIPE;
|
||||
}
|
||||
|
||||
|
|
|
|||
|
|
@ -83,7 +83,8 @@ static int do_make_slave(struct mount *mnt)
|
|||
if (peer_mnt == mnt)
|
||||
peer_mnt = NULL;
|
||||
}
|
||||
if (IS_MNT_SHARED(mnt) && list_empty(&mnt->mnt_share))
|
||||
if (mnt->mnt_group_id && IS_MNT_SHARED(mnt) &&
|
||||
list_empty(&mnt->mnt_share))
|
||||
mnt_release_group_id(mnt);
|
||||
|
||||
list_del_init(&mnt->mnt_share);
|
||||
|
|
|
|||
|
|
@ -120,7 +120,7 @@ static int qnx6_readdir(struct file *filp, void *dirent, filldir_t filldir)
|
|||
struct inode *inode = file_inode(filp);
|
||||
struct super_block *s = inode->i_sb;
|
||||
struct qnx6_sb_info *sbi = QNX6_SB(s);
|
||||
loff_t pos = filp->f_pos & (QNX6_DIR_ENTRY_SIZE - 1);
|
||||
loff_t pos = filp->f_pos & ~(QNX6_DIR_ENTRY_SIZE - 1);
|
||||
unsigned long npages = dir_pages(inode);
|
||||
unsigned long n = pos >> PAGE_CACHE_SHIFT;
|
||||
unsigned start = (pos & ~PAGE_CACHE_MASK) / QNX6_DIR_ENTRY_SIZE;
|
||||
|
|
|
|||
Loading…
Reference in a new issue