Mohamed Ghannam ce31b6ac11 RDS: null pointer dereference in rds_atomic_free_op ...

[ Upstream commit 7d11f77f84 ]

set rm->atomic.op_active to 0 when rds_pin_pages() fails
or the user supplied address is invalid,
this prevents a NULL pointer usage in rds_atomic_free_op()

Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-01-17 09:38:53 +01:00

..

af_rds.c

…

bind.c

RDS: TCP: Enable multipath RDS for TCP

2016-07-15 11:36:58 -07:00

cong.c

RDS: split out connection specific state from rds_connection to rds_conn_path

2016-06-14 23:50:41 -07:00

connection.c

RDS: TCP: Enable multipath RDS for TCP

2016-07-15 11:36:58 -07:00

ib_cm.c

rds: ib: add error handle

2017-10-08 10:26:10 +02:00

ib_fmr.c

…

ib_frmr.c

RDS: RDMA: fix the ib_map_mr_sg_zbva() argument

2017-11-30 08:39:10 +00:00

ib_mr.h

…

ib_rdma.c

RDS: split out connection specific state from rds_connection to rds_conn_path

2016-06-14 23:50:41 -07:00

ib_recv.c

RDS: TCP: make receive path use the rds_conn_path

2016-07-01 16:45:17 -04:00

ib_ring.c

…

ib_send.c

RDS: RDMA: Fix the composite message user notification

2017-10-08 10:26:02 +02:00

ib_stats.c

…

ib_sysctl.c

…

ib.c

IB/core: add support to create a unsafe global rkey to ib_create_pd

2016-09-23 13:47:44 -04:00

ib.h

RDS: add __printf format attribute to error reporting functions

2016-08-08 16:16:21 -07:00

info.c

…

info.h

…

Kconfig

…

loop.c

RDS: TCP: Hooks to set up a single connection path

2016-07-01 16:45:17 -04:00

loop.h

…

Makefile

rds: debug messages are enabled by default

2016-10-29 15:55:57 -04:00

message.c

RDS: TCP: Enable multipath RDS for TCP

2016-07-15 11:36:58 -07:00

page.c

RDS: memory allocated must be align to 8

2016-04-07 16:58:27 -04:00

rdma_transport.c

RDS: split out connection specific state from rds_connection to rds_conn_path

2016-06-14 23:50:41 -07:00

rdma_transport.h

…

rdma.c

RDS: null pointer dereference in rds_atomic_free_op

2018-01-17 09:38:53 +01:00

rds_single_path.h

RDS: split out connection specific state from rds_connection to rds_conn_path

2016-06-14 23:50:41 -07:00

rds.h

RDS: make message size limit compliant with spec

2017-11-30 08:39:10 +00:00

recv.c

RDS: TCP: Enable multipath RDS for TCP

2016-07-15 11:36:58 -07:00

send.c

RDS: Check cmsg_len before dereferencing CMSG_DATA

2018-01-02 20:35:11 +01:00

stats.c

…

sysctl.c

net: rds: fix coding style issues

2016-06-18 21:34:09 -07:00

tcp_connect.c

RDS: TCP: Enable multipath RDS for TCP

2016-07-15 11:36:58 -07:00

tcp_listen.c

rds: tcp: Sequence teardown of listen and acceptor sockets to avoid races

2017-12-14 09:28:20 +01:00

tcp_recv.c

RDS: TCP: make receive path use the rds_conn_path

2016-07-01 16:45:17 -04:00

tcp_send.c

RDS: TCP: Enable multipath RDS for TCP

2016-07-15 11:36:58 -07:00

tcp_stats.c

…

tcp.c

rds: tcp: Sequence teardown of listen and acceptor sockets to avoid races

2017-12-14 09:28:20 +01:00

tcp.h

rds: tcp: Sequence teardown of listen and acceptor sockets to avoid races

2017-12-14 09:28:20 +01:00

threads.c

RDS: TCP: Enable multipath RDS for TCP

2016-07-15 11:36:58 -07:00

transport.c

net: rds: fix coding style issues

2016-06-18 21:34:09 -07:00