linux/fs/ceph
Xiubo Li a002274db5 ceph: do not access the kiocb after aio requests
[ Upstream commit d1d9655052 ]

In aio case, if the completion comes very fast just before the
ceph_read_iter() returns to fs/aio.c, the kiocb will be freed in
the completion callback, then if ceph_read_iter() access again
we will potentially hit the use-after-free bug.

[ jlayton: initialize direct_lock early, and use it everywhere ]

URL: https://tracker.ceph.com/issues/45649
Signed-off-by: Xiubo Li <xiubli@redhat.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-09-03 11:26:47 +02:00
..
Kconfig
Makefile
acl.c
addr.c
cache.c
cache.h
caps.c ceph: flush release queue when handling caps for unknown inode 2020-06-03 08:21:25 +02:00
ceph_frag.c
debugfs.c
dir.c ceph: set sec_context xattr on symlink creation 2020-08-21 13:05:28 +02:00
export.c ceph: don't return -ESTALE if there's still an open file 2020-06-24 17:50:37 +02:00
file.c ceph: do not access the kiocb after aio requests 2020-09-03 11:26:47 +02:00
inode.c
io.c
io.h
ioctl.c
ioctl.h
locks.c
mds_client.c ceph: fix potential mdsc use-after-free crash 2020-09-03 11:26:47 +02:00
mds_client.h
mdsmap.c
quota.c ceph: demote quotarealm lookup warning to a debug message 2020-05-14 07:58:27 +02:00
snap.c ceph: fix memory leak in ceph_cleanup_snapid_map() 2020-04-01 11:01:59 +02:00
strings.c
super.c ceph: canonicalize server path in place 2020-04-13 10:48:11 +02:00
super.h ceph: canonicalize server path in place 2020-04-13 10:48:11 +02:00
xattr.c