Mohamed Ghannam 44496521c6 RDS: null pointer dereference in rds_atomic_free_op ...

[ Upstream commit 7d11f77f84 ]

set rm->atomic.op_active to 0 when rds_pin_pages() fails
or the user supplied address is invalid,
this prevents a NULL pointer usage in rds_atomic_free_op()

Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-01-17 09:35:29 +01:00

..

af_rds.c

RDS: convert bind hash table to re-sizable hashtable

2015-11-02 15:36:23 -05:00

bind.c

RDS: convert bind hash table to re-sizable hashtable

2015-11-02 15:36:23 -05:00

cong.c

RDS: Fix the atomicity for congestion map update

2017-05-02 21:19:49 -07:00

connection.c

RDS: fix race condition when sending a message on unbound socket

2015-11-24 17:20:09 -05:00

ib_cm.c

rds: ib: add error handle

2017-10-08 10:14:19 +02:00

ib_rdma.c

RDS: IB: split mr pool to improve 8K messages performance

2015-10-05 11:19:02 -07:00

ib_recv.c

mm, page_alloc: distinguish between being unable to sleep, unwilling to sleep and avoiding waking kswapd

2015-11-06 17:50:42 -08:00

ib_ring.c

…

ib_send.c

RDS: RDMA: Fix the composite message user notification

2017-10-08 10:14:16 +02:00

ib_stats.c

RDS: IB: split mr pool to improve 8K messages performance

2015-10-05 11:19:02 -07:00

ib_sysctl.c

…

ib.c

Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

2015-11-07 13:33:07 -08:00

ib.h

Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

2015-11-07 13:33:07 -08:00

info.c

rds: fix an integer overflow test in rds_info_getsockopt()

2015-08-03 15:20:16 -07:00

info.h

…

iw_cm.c

IB/cma: Add support for network namespaces

2015-10-28 12:32:48 -04:00

iw_rdma.c

Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

2015-11-07 13:33:07 -08:00

iw_recv.c

…

iw_ring.c

…

iw_send.c

RDS/IW: Convert to new memory registration API

2015-10-28 22:27:18 -04:00

iw_stats.c

…

iw_sysctl.c

…

iw.c

IB/cma: Add support for network namespaces

2015-10-28 12:32:48 -04:00

iw.h

RDS/IW: Convert to new memory registration API

2015-10-28 22:27:18 -04:00

Kconfig

…

loop.c

…

loop.h

…

Makefile

…

message.c

rds: Make rds_message_copy_from_user() return 0 on success.

2015-02-07 22:41:56 -08:00

page.c

…

rdma_transport.c

IB/cma: Add support for network namespaces

2015-10-28 12:32:48 -04:00

rdma_transport.h

…

rdma.c

RDS: null pointer dereference in rds_atomic_free_op

2018-01-17 09:35:29 +01:00

rds.h

RDS: RDMA: Fix the composite message user notification

2017-10-08 10:14:16 +02:00

recv.c

rds: fix an infoleak in rds_inc_info_copy

2016-09-15 08:27:51 +02:00

send.c

RDS: RDMA: return appropriate error on rdma map failures

2017-11-30 08:37:25 +00:00

stats.c

…

sysctl.c

net: rds: use correct size for max unacked packets and bytes

2015-02-04 16:07:27 -08:00

tcp_connect.c

RDS-TCP: Support multiple RDS-TCP listen endpoints, one per netns.

2015-08-07 11:29:58 -07:00

tcp_listen.c

rds: tcp: use sock_create_lite() to create the accept socket

2017-07-21 07:44:55 +02:00

tcp_recv.c

RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in rds_tcp_data_recv

2015-10-27 19:46:34 -07:00

tcp_send.c

RDS-TCP: Set up MSG_MORE and MSG_SENDPAGE_NOTLAST as appropriate in rds_tcp_xmit

2015-10-05 03:34:53 -07:00

tcp_stats.c

…

tcp.c

RDS: fix rds_tcp_init() error path

2016-08-10 11:49:29 +02:00

tcp.h

RDS-TCP: Support multiple RDS-TCP listen endpoints, one per netns.

2015-08-07 11:29:58 -07:00

threads.c

RDS: use rds_send_xmit() state instead of RDS_LL_SEND_FULL

2015-10-05 11:19:01 -07:00

transport.c

RDS-TCP: Make RDS-TCP work correctly when it is set up in a netns other than init_net

2015-08-07 11:29:57 -07:00