linux/drivers/block
Jens Axboe 429a787be6 nbd: fix use-after-free of rq/bio in the xmit path
For writes, we can get a completion in while we're still iterating
the request and bio chain. If that happens, we're reading freed
memory and we can crash.

Break out after the last segment and avoid having the iterator
read freed memory.

Reviewed-by: Josef Bacik <jbacik@fb.com>
Signed-off-by: Jens Axboe <axboe@fb.com>
2016-11-17 12:30:37 -07:00
..
aoe tree wide: get rid of __GFP_REPEAT for order-0 allocations part I 2016-06-24 17:23:52 -07:00
drbd block,fs: use REQ_* flags directly 2016-11-01 09:43:26 -06:00
mtip32xx Block: mtip32xx: Improvement in code readability when memdup_user() fails. 2016-11-11 13:37:04 -07:00
paride paride: make 'verbose' parameter an 'int' again 2016-03-15 16:55:16 -07:00
rsxx block: convert to device_add_disk() 2016-06-27 12:26:08 -07:00
xen-blkback block,fs: use REQ_* flags directly 2016-11-01 09:43:26 -06:00
zram block/mm: make bdev_ops->rw_page() take a bool for read/write 2016-08-07 14:41:02 -06:00
DAC960.c
DAC960.h
Kconfig cpqarray: remove it from the kernel 2016-03-14 09:06:01 -06:00
Makefile drivers:block: cpqarray clean up 2016-03-15 15:59:47 -07:00
amiflop.c
ataflop.c
brd.c brd: remove support for BLKFLSBUF 2016-10-25 11:55:25 -06:00
cciss.c block: convert to device_add_disk() 2016-06-27 12:26:08 -07:00
cciss.h
cciss_cmd.h
cciss_scsi.c
cciss_scsi.h
cryptoloop.c block: cryptoloop - Use new skcipher interface 2016-01-27 20:35:43 +08:00
floppy.c Revert "floppy: refactor open() flags handling" 2016-08-25 08:56:51 -06:00
hd.c
loop.c loop: return proper error from loop_queue_rq() 2016-11-14 15:58:44 -07:00
loop.h block: loop: support DIO & AIO 2015-09-23 11:01:16 -06:00
mg_disk.c mg_disk: fix error path in mg_probe() 2016-06-28 11:01:27 -06:00
nbd.c nbd: fix use-after-free of rq/bio in the xmit path 2016-11-17 12:30:37 -07:00
null_blk.c null_blk: add usage hints for NVM 2016-11-16 08:26:11 -07:00
osdblk.c block, drivers: add REQ_OP_FLUSH operation 2016-06-07 13:41:38 -06:00
pktcdvd.c pktcdvd: don't scribble over the bvec array 2016-11-07 08:50:54 -07:00
ps3disk.c block: convert to device_add_disk() 2016-06-27 12:26:08 -07:00
ps3vram.c block: convert to device_add_disk() 2016-06-27 12:26:08 -07:00
rbd.c The big ticket item here is support for rbd exclusive-lock feature, 2016-10-10 13:52:05 -07:00
rbd_types.h rbd: support for exclusive-lock feature 2016-08-24 23:49:16 +02:00
skd_main.c skd: fix function prototype 2016-11-09 22:53:47 -07:00
skd_s1120.h
smart1,2.h
sunvdc.c block: convert to device_add_disk() 2016-06-27 12:26:08 -07:00
swim.c
swim3.c
swim_asm.S
sx8.c sx8: use real time for the command seconds 2015-12-23 08:42:59 -07:00
umem.c umem: use op_is_sync to check for synchronous requests 2016-11-01 09:43:26 -06:00
umem.h
virtio_blk.c blk-mq: remove ->map_queue 2016-09-15 08:42:03 -06:00
xen-blkfront.c blk-mq: Add a kick_requeue_list argument to blk_mq_requeue_request() 2016-11-02 12:50:19 -06:00
xsysace.c
z2ram.c