![]() In ntfs_mft_record_alloc() when mapping the new extent mft record with map_extent_mft_record() we overwrite @m with the return value and on error, we then try to use the old @m but that is no longer there as @m now contains an error code instead so we crash when dereferencing the error code as if it were a pointer. The simple fix is to use a temporary variable to store the return value thus preserving the original @m for later use. This is a backport from the commercial Tuxera-NTFS driver and is well tested... Thanks go to Julia Lawall for pointing this out (whilst I had fixed it in the commercial driver I had failed to fix it in the Linux kernel). Signed-off-by: Anton Altaparmakov <anton@tuxera.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> |
||
---|---|---|
.. | ||
caching | ||
configfs | ||
nfs | ||
pohmelfs | ||
00-INDEX | ||
9p.txt | ||
adfs.txt | ||
affs.txt | ||
afs.txt | ||
autofs4-mount-control.txt | ||
automount-support.txt | ||
befs.txt | ||
bfs.txt | ||
btrfs.txt | ||
ceph.txt | ||
cifs.txt | ||
coda.txt | ||
cramfs.txt | ||
debugfs.txt | ||
devpts.txt | ||
directory-locking | ||
dlmfs.txt | ||
dnotify.txt | ||
dnotify_test.c | ||
ecryptfs.txt | ||
exofs.txt | ||
ext2.txt | ||
ext3.txt | ||
ext4.txt | ||
fiemap.txt | ||
files.txt | ||
fuse.txt | ||
gfs2-glocks.txt | ||
gfs2-uevents.txt | ||
gfs2.txt | ||
hfs.txt | ||
hfsplus.txt | ||
hpfs.txt | ||
inotify.txt | ||
isofs.txt | ||
jfs.txt | ||
Locking | ||
locks.txt | ||
logfs.txt | ||
Makefile | ||
mandatory-locking.txt | ||
ncpfs.txt | ||
nilfs2.txt | ||
ntfs.txt | ||
ocfs2.txt | ||
omfs.txt | ||
path-lookup.txt | ||
porting | ||
proc.txt | ||
quota.txt | ||
ramfs-rootfs-initramfs.txt | ||
relay.txt | ||
romfs.txt | ||
seq_file.txt | ||
sharedsubtree.txt | ||
spufs.txt | ||
squashfs.txt | ||
sysfs-pci.txt | ||
sysfs-tagging.txt | ||
sysfs.txt | ||
sysv-fs.txt | ||
tmpfs.txt | ||
ubifs.txt | ||
udf.txt | ||
ufs.txt | ||
vfat.txt | ||
vfs.txt | ||
xfs-delayed-logging-design.txt | ||
xfs.txt | ||
xip.txt |