Dan Carpenter
813a8dd9c4
drbd: use after free in drbd_create_device()
...
[ Upstream commit a7a1598189228b5007369a9622ccdf587be0730f ]
The drbd_destroy_connection() frees the "connection" so use the _safe()
iterator to prevent a use after free.
Fixes: b6f85ef953 ("drbd: Iterate over all connections")
Signed-off-by: Dan Carpenter <error27@gmail.com>
Reviewed-by: Christoph Böhmwalder <christoph.boehmwalder@linbit.com>
Link: https://lore.kernel.org/r/Y3Jd5iZRbNQ9w6gm@kili
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-11-25 17:42:16 +01:00
..
aoe
drbd
drbd: use after free in drbd_create_device()
2022-11-25 17:42:16 +01:00
mtip32xx
paride
rsxx
xen-blkback
zram
zram: off by one in read_block_state()
2021-11-17 09:48:47 +01:00
amiflop.c
ataflop.c
block: ataflop: fix breakage introduced at blk-mq refactoring
2021-11-17 09:48:38 +01:00
brd.c
cryptoloop.c
cryptoloop: add a deprecation warning
2021-09-12 08:56:40 +02:00
floppy.c
floppy: use a statically allocated error counter
2022-05-25 09:14:31 +02:00
Kconfig
floppy: disable FDRAWCMD by default
2022-05-09 09:03:20 +02:00
loop.c
loop: Check for overflow while configuring loop
2022-09-05 10:27:43 +02:00
loop.h
Makefile
nbd.c
nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
2022-10-26 13:22:56 +02:00
null_blk.h
null_blk_main.c
null_blk: fix ida error handling in null_add_dev()
2022-08-25 11:17:59 +02:00
null_blk_zoned.c
drivers/block/null_blk/main: Fix a double free in null_init.
2021-05-14 09:44:26 +02:00
pktcdvd.c
ps3disk.c
ps3vram.c
rbd.c
rbd: always kick acquire on "acquired" and "released" notifications
2021-07-28 13:31:01 +02:00
rbd_types.h
skd_main.c
skd_s1120.h
sunvdc.c
swim.c
swim3.c
swim_asm.S
sx8.c
umem.c
umem.h
virtio_blk.c
virtio_blk: fix the discard_granularity and discard_alignment queue limits
2022-06-14 18:11:35 +02:00
xen-blkfront.c
xen/blkfront: force data bouncing when backend is untrusted
2022-07-07 17:36:53 +02:00
xsysace.c
z2ram.c