kernel.git/fs/omfs/inode.c, branch linux-3.4.yHosts the 0x221E linux distro kernel.
https://git.0xinfinity.dev/distro/kernel.git/atom?h=linux-3.4.y2015-09-18T01:20:43Zfs, omfs: add NULL terminator in the end up the token list2015-09-18T01:20:43ZSasha Levin2015-05-28T22:44:29Zurn:sha1:b31dfb226bf10b9b9bd58fe5bf0eceaef5d1bfe0
commit dcbff39da3d815f08750552fdd04f96b51751129 upstream.
match_token() expects a NULL terminator at the end of the token list so
that it would know where to stop. Not having one causes it to overrun
to invalid memory.
In practice, passing a mount option that omfs didn't recognize would
sometimes panic the system.
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
Signed-off-by: Bob Copeland <me@bobcopeland.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Zefan Li <lizefan@huawei.com>
switch open-coded instances of d_make_root() to new helper2012-03-21T01:29:35ZAl Viro2012-01-09T03:15:13Zurn:sha1:48fde701aff662559b38d9a609574068f22d00fe
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
omfs: propagate umode_t2012-01-04T03:55:01ZAl Viro2011-07-25T02:58:10Zurn:sha1:587228be4a43c28c402c1cc8a5f185252d8e2231
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
new helper: mount_bdev()2010-10-29T08:16:13ZAl Viro2010-07-24T20:46:55Zurn:sha1:152a08366671080f27b32e0c411ad620c5f88b57
... and switch of the obvious get_sb_bdev() users to ->mount()
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/bcopeland/omfs2010-08-10T18:47:36ZLinus Torvalds2010-08-10T18:47:36Zurn:sha1:8196867c74890ccdf40a2b5e3e173597fbc4f9ac
* 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/bcopeland/omfs:
omfs: fix uninitialized variable warning
omfs: sanity check cluster size
omfs: refuse to mount if bitmap pointer is obviously wrong
omfs: check bounds on block numbers before passing to sb_bread
omfs: fix memory leak
switch omfs to ->evict_inode()2010-08-09T20:48:05ZAl Viro2010-06-06T14:12:01Zurn:sha1:69c9e750176b409559b2361fbb28fa7bbf3c5461
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
omfs: sanity check cluster size2010-07-10T18:38:11ZBob Copeland2010-07-06T15:16:46Zurn:sha1:8800a044c71a128633cf3febaf4780531a991334
A corrupt filesystem could have a bad cluster size; this could result in
the filesystem allocating too much space for files if too large, or
getting stuck in omfs_allocate_block if too small. The proper range is
1-8 blocks.
Reported-by: Eric Sesterhenn <snakebyte@gmx.de>
Signed-off-by: Bob Copeland <me@bobcopeland.com>
omfs: refuse to mount if bitmap pointer is obviously wrong2010-07-10T18:37:39ZBob Copeland2008-08-14T22:43:59Zurn:sha1:9442e54f433eff9b6fbd0836611df4c1919df370
If the free space bitmap pointer is corrupted such that it lies outside
of the number of blocks in the filesystem, print a message and fail the
mount so the user can fix it offline.
Signed-off-by: Bob Copeland <me@bobcopeland.com>
omfs: check bounds on block numbers before passing to sb_bread2010-07-10T18:37:06ZBob Copeland2008-09-06T21:51:53Zurn:sha1:f068272cb2f134a194b93e94a8e0672bfce48cd8
In case of filesystem corruption, passing unchecked block numbers into
sb_bread can result in an infinite loop in __getblk(). Introduce a wrapper
function omfs_sbread() to check the block numbers and to also perform the
clus_to_blk() scaling.
Signed-off-by: Bob Copeland <me@bobcopeland.com>
omfs: fix memory leak2010-07-06T15:05:31ZDavidlohr Bueso2010-07-06T04:50:58Zurn:sha1:70d9e384aa7df681cfffd65947af72b22e86690e
In the error path of omfs_fill_super(), the FS super block info
(sbi) is not being freed. Correct this.
Signed-off-by: Davidlohr Bueso <dave@gnu.org>
Signed-off-by: Bob Copeland <me@bobcopeland.com>