Files
twx-linux/include/linux
Al Viro 82182ed2ce add forgotten ->b_data in memcpy() call in ext3/resize.c (oopsable)
sbi->s_group_desc is an array of pointers to buffer_head.  memcpy() of
buffer size from address of buffer_head is a bad idea - it will generate
junk in any case, may oops if buffer_head is close to the end of slab
page and next page is not mapped and isn't what was intended there.
IOW, ->b_data is missing in that call.  Fortunately, result doesn't go
into the primary on-disk data structures, so only backup ones get crap
written to them; that had allowed this bug to remain unnoticed until
now.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Adrian Bunk <bunk@stusta.de>
2006-11-29 11:40:22 +01:00
..
2006-01-08 20:14:02 -08:00
2006-02-22 09:32:46 +00:00
2006-01-18 19:20:24 -08:00
2006-01-13 16:29:56 -08:00
2006-01-13 09:12:21 -08:00
2006-02-03 08:32:00 -08:00
2006-03-09 19:47:37 -08:00
2006-02-11 21:41:11 -08:00
2006-01-08 20:14:02 -08:00
2006-03-27 22:47:30 -08:00
2006-05-01 12:03:42 -07:00
2006-01-14 18:27:10 -08:00
2006-01-08 20:13:49 -08:00
2006-01-18 19:20:29 -08:00
2006-03-08 14:14:01 -08:00
2006-01-14 18:27:09 -08:00
2006-01-06 13:24:54 -08:00
2006-02-01 08:53:13 -08:00
2006-02-08 01:03:52 -05:00
2006-01-06 13:24:29 -08:00
2006-01-06 08:33:53 -08:00
2006-02-10 08:13:12 -08:00
2006-02-22 09:39:02 -08:00
2006-01-08 20:13:46 -08:00
2006-01-18 19:20:29 -08:00
2006-01-06 08:33:20 -08:00
2006-01-14 18:27:12 -08:00
2006-02-09 16:43:38 -08:00
2006-03-08 14:14:01 -08:00
2006-03-08 14:14:01 -08:00
2006-03-27 22:47:31 -08:00
2006-01-10 08:01:42 -08:00
2006-01-08 20:14:02 -08:00
2006-01-14 18:27:13 -08:00
2006-02-07 20:56:35 -05:00
2006-01-12 14:06:31 -08:00
2006-01-08 20:13:45 -08:00
2006-02-24 14:31:39 -08:00
2006-02-11 21:41:11 -08:00
2006-01-12 14:06:38 -08:00
2006-01-18 19:20:17 -08:00
2006-02-10 08:13:12 -08:00
2006-01-10 08:01:59 -08:00
2006-02-10 08:13:12 -08:00
2006-02-01 08:53:13 -08:00
2006-01-08 20:12:40 -08:00
2006-01-10 08:01:57 -08:00