linux/fs/ntfs
Anton Altaparmakov af5eb745ef NTFS: Fix invalid pointer dereference in ntfs_mft_record_alloc().
In ntfs_mft_record_alloc() when mapping the new extent mft record with
map_extent_mft_record() we overwrite @m with the return value and on
error, we then try to use the old @m but that is no longer there as @m
now contains an error code instead so we crash when dereferencing the
error code as if it were a pointer.

The simple fix is to use a temporary variable to store the return value
thus preserving the original @m for later use.  This is a backport from
the commercial Tuxera-NTFS driver and is well tested...

Thanks go to Julia Lawall for pointing this out (whilst I had fixed it
in the commercial driver I had failed to fix it in the Linux kernel).

Signed-off-by: Anton Altaparmakov <anton@tuxera.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2011-01-31 12:58:11 +10:00
..
Kconfig
Makefile NTFS: writev() fix and maintenance/contact details update 2011-01-12 08:35:53 -08:00
aops.c
aops.h
attrib.c
attrib.h
bitmap.c
bitmap.h
collate.c
collate.h
compress.c
debug.c
debug.h
dir.c
dir.h
endian.h
file.c NTFS: writev() fix and maintenance/contact details update 2011-01-12 08:35:53 -08:00
index.c
index.h
inode.c fs: icache RCU free inodes 2011-01-07 17:50:26 +11:00
inode.h convert remaining ->clear_inode() to ->evict_inode() 2010-08-09 16:48:37 -04:00
layout.h
lcnalloc.c
lcnalloc.h
logfile.c
logfile.h
malloc.h
mft.c NTFS: Fix invalid pointer dereference in ntfs_mft_record_alloc(). 2011-01-31 12:58:11 +10:00
mft.h
mst.c
namei.c
ntfs.h
quota.c
quota.h
runlist.c
runlist.h
super.c NTFS: writev() fix and maintenance/contact details update 2011-01-12 08:35:53 -08:00
sysctl.c
sysctl.h
time.h
types.h
unistr.c
upcase.c
usnjrnl.c
usnjrnl.h
volume.h