Ilya Dryomov
9c55ad1c21
libceph: validate con->state at the top of try_write()
...
ceph_con_workfn() validates con->state before calling try_read() and
then try_write(). However, try_read() temporarily releases con->mutex,
notably in process_message() and ceph_con_in_msg_alloc(), opening the
window for ceph_con_close() to sneak in, close the connection and
release con->sock. When try_write() is called on the assumption that
con->state is still valid (i.e. not STANDBY or CLOSED), a NULL sock
gets passed to the networking stack:
BUG: unable to handle kernel NULL pointer dereference at 0000000000000020
IP: selinux_socket_sendmsg+0x5/0x20
Make sure con->state is valid at the top of try_write() and add an
explicit BUG_ON for this, similar to try_read().
Cc: [email protected]
Link: https://tracker.ceph.com/issues/23706
Signed-off-by: Ilya Dryomov <[email protected] >
Reviewed-by: Jason Dillaman <[email protected] >
2018-04-26 17:39:08 +02:00
..
crush
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
armor.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
auth.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
auth_none.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
auth_none.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
auth_x.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
auth_x.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
auth_x_protocol.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
buffer.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ceph_common.c
The big ticket items are:
2018-04-10 12:25:30 -07:00
ceph_fs.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ceph_hash.c
ceph: mark expected switch fall-throughs
2017-11-13 12:11:39 +01:00
ceph_strings.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
cls_lock_client.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
crypto.c
libceph, ceph: add __init attribution to init funcitons
2018-04-02 10:12:48 +02:00
crypto.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
debugfs.c
libceph, ceph: add __init attribution to init funcitons
2018-04-02 10:12:48 +02:00
Kconfig
libceph: select CRYPTO_CBC in addition to CRYPTO_AES
2014-10-14 21:03:20 +04:00
Makefile
libceph: striping framework implementation
2018-04-02 10:12:42 +02:00
messenger.c
libceph: validate con->state at the top of try_write()
2018-04-26 17:39:08 +02:00
mon_client.c
libceph: reschedule a tick in finish_hunting()
2018-04-24 10:40:21 +02:00
msgpool.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
osd_client.c
libceph, ceph: add __init attribution to init funcitons
2018-04-02 10:12:48 +02:00
osdmap.c
libceph, ceph: move ceph_calc_file_object_mapping() to striper.c
2018-04-02 10:12:43 +02:00
pagelist.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
pagevec.c
Merge branch 'work.get_user_pages_fast' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2017-11-17 12:38:51 -08:00
snapshot.c
libceph: convert ceph_snap_context.nref from atomic_t to refcount_t
2017-05-04 09:19:18 +02:00
string_table.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
striper.c
libceph, ceph: move ceph_calc_file_object_mapping() to striper.c
2018-04-02 10:12:43 +02:00