linux/fs/ntfs
Anton Altaparmakov af5eb745ef NTFS: Fix invalid pointer dereference in ntfs_mft_record_alloc().
In ntfs_mft_record_alloc() when mapping the new extent mft record with
map_extent_mft_record() we overwrite @m with the return value and on
error, we then try to use the old @m but that is no longer there as @m
now contains an error code instead so we crash when dereferencing the
error code as if it were a pointer.

The simple fix is to use a temporary variable to store the return value
thus preserving the original @m for later use.  This is a backport from
the commercial Tuxera-NTFS driver and is well tested...

Thanks go to Julia Lawall for pointing this out (whilst I had fixed it
in the commercial driver I had failed to fix it in the Linux kernel).

Signed-off-by: Anton Altaparmakov <anton@tuxera.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2011-01-31 12:58:11 +10:00
..
Kconfig fs/Kconfig: move ntfs out 2009-01-22 13:15:55 +03:00
Makefile NTFS: writev() fix and maintenance/contact details update 2011-01-12 08:35:53 -08:00
aops.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
aops.h
attrib.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
attrib.h
bitmap.c
bitmap.h
collate.c
collate.h
compress.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
debug.c
debug.h ntfs: don't fool kernel-doc 2008-12-01 19:55:25 -08:00
dir.c drop unused dentry argument to ->fsync 2010-05-27 22:05:02 -04:00
dir.h
endian.h
file.c NTFS: writev() fix and maintenance/contact details update 2011-01-12 08:35:53 -08:00
index.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
index.h
inode.c fs: icache RCU free inodes 2011-01-07 17:50:26 +11:00
inode.h convert remaining ->clear_inode() to ->evict_inode() 2010-08-09 16:48:37 -04:00
layout.h trivial: fix typo "to to" in multiple files 2009-09-21 15:14:55 +02:00
lcnalloc.c
lcnalloc.h
logfile.c tree-wide: fix assorted typos all over the place 2009-12-04 15:39:55 +01:00
logfile.h ntfs: remove private wrapper of endian helpers 2009-04-01 08:59:18 -07:00
malloc.h mm: replace various uses of num_physpages by totalram_pages 2009-09-22 07:17:38 -07:00
mft.c NTFS: Fix invalid pointer dereference in ntfs_mft_record_alloc(). 2011-01-31 12:58:11 +10:00
mft.h
mst.c
namei.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
ntfs.h exportfs: make struct export_operations const 2007-10-22 08:13:21 -07:00
quota.c
quota.h
runlist.c NTFS: Fix a mount time deadlock. 2007-10-12 09:16:30 -07:00
runlist.h
super.c NTFS: writev() fix and maintenance/contact details update 2011-01-12 08:35:53 -08:00
sysctl.c sysctl: Drop & in front of every proc_handler. 2009-11-18 08:37:40 -08:00
sysctl.h Convert files to UTF-8 and some cleanups 2007-10-19 23:21:04 +02:00
time.h
types.h
unistr.c
upcase.c ntfs: le*_add_cpu conversion 2008-05-24 09:56:08 -07:00
usnjrnl.c
usnjrnl.h ntfs: remove private wrapper of endian helpers 2009-04-01 08:59:18 -07:00
volume.h