dann frazier 226291aa46 ocfs2_connection_find() returns pointer to bad structure ...

If ocfs2_live_connection_list is empty, ocfs2_connection_find() will return
a pointer to the LIST_HEAD, cast as a ocfs2_live_connection. This can cause
an oops when ocfs2_control_send_down() dereferences c->oc_conn:

Call Trace:
  [<ffffffffa00c2a3c>] ocfs2_control_message+0x28c/0x2b0 [ocfs2_stack_user]
  [<ffffffffa00c2a95>] ocfs2_control_write+0x35/0xb0 [ocfs2_stack_user]
  [<ffffffff81143a88>] vfs_write+0xb8/0x1a0
  [<ffffffff8155cc13>] ? do_page_fault+0x153/0x3b0
  [<ffffffff811442f1>] sys_write+0x51/0x80
  [<ffffffff810121b2>] system_call_fastpath+0x16/0x1b

Fix by explicitly returning NULL if no match is found.

Signed-off-by: dann frazier <dann.frazier@canonical.com>
Signed-off-by: Joel Becker <joel.becker@oracle.com>

2010-11-18 15:41:41 -08:00

..

cluster

ocfs2: fix memory leak

2010-11-18 14:10:56 -08:00

dlm

fs/ocfs2/dlm: Use GFP_ATOMIC under spin_lock

2010-11-18 14:10:55 -08:00

dlmfs

convert get_sb_nodev() users

2010-10-29 04:16:31 -04:00

acl.c

ocfs2: update ctime when changing the file's permission by setfacl

2010-09-23 14:16:21 -07:00

acl.h

ocfs2: Always include ACL support

2009-10-28 23:05:57 -07:00

alloc.c

ocfs2: Fix deadlock when allocating page

2010-09-08 14:25:57 +08:00

alloc.h

Merge branch 'discontig-bg' of git://oss.oracle.com/git/tma/linux-2.6 into ocfs2-merge-window

2010-05-18 16:40:42 -07:00

aops.c

fs: kill block_prepare_write

2010-10-25 21:18:20 -04:00

aops.h

fs: kill block_prepare_write

2010-10-25 21:18:20 -04:00

blockcheck.c

ocfs2: Fix metaecc error messages

2010-09-08 14:25:53 +08:00

blockcheck.h

ocfs2: Add statistics for the checksum and ecc operations.

2009-06-03 19:15:36 -07:00

buffer_head_io.c

Merge branch 'skip_delete_inode' of git://git.kernel.org/pub/scm/linux/kernel/git/mfasheh/ocfs2-mark into ocfs2-fixes

2010-04-30 13:37:29 -07:00

buffer_head_io.h

ocfs2: Take the inode out of the metadata read/write paths.

2009-09-04 16:07:48 -07:00

dcache.c

Ocfs2: Stop tracking a negative dentry after dentry_iput().

2010-11-18 14:10:56 -08:00

dcache.h

Track negative entries v3

2010-09-10 09:18:15 -07:00

dir.c

Ocfs2: Re-access the journal after ocfs2_insert_extent() in dxdir codes.

2010-09-10 09:19:11 -07:00

dir.h

ocfs2: Introduce dir free space list

2009-04-03 11:39:16 -07:00

dlmglue.c

Track negative entries v3

2010-09-10 09:18:15 -07:00

dlmglue.h

ocfs2: Fix lockdep warning in reflink.

2010-09-10 09:19:06 -07:00

export.c

ocfs2/trivial: Remove trailing whitespaces

2010-01-25 19:20:51 -08:00

export.h

exportfs: make struct export_operations const

2007-10-22 08:13:21 -07:00

extent_map.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

extent_map.h

ocfs2: Return extent flags for xattr value tree.

2009-09-22 20:09:39 -07:00

file.c

fs: kill block_prepare_write

2010-10-25 21:18:20 -04:00

file.h

ocfs2: Zero the tail cluster when extending past i_size.

2010-07-08 13:25:35 -07:00

heartbeat.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

heartbeat.h

ocfs2: Move o2hb functionality into the stack glue.

2008-04-18 08:56:04 -07:00

inode.c

Track negative entries v3

2010-09-10 09:18:15 -07:00

inode.h

Track negative entries v3

2010-09-10 09:18:15 -07:00

ioctl.c

Ocfs2: Add new OCFS2_IOC_INFO ioctl for ocfs2 v8.

2010-09-10 08:35:41 -07:00

ioctl.h

Ocfs2: Move ocfs2 ioctl definitions from ocfs2_fs.h to newly added ocfs2_ioctl.h

2010-03-02 14:10:20 -08:00

journal.c

ocfs2: Remove obsolete comments before ocfs2_start_trans.

2010-09-10 08:40:18 -07:00

journal.h

Reorganize data elements to reduce struct sizes

2010-09-10 08:39:27 -07:00

Kconfig

ocfs2: Always include ACL support

2009-10-28 23:05:57 -07:00

localalloc.c

ocfs2: Limit default local alloc size within bitmap range.

2010-06-15 16:50:43 -07:00

localalloc.h

ocfs2: increase the default size of local alloc windows

2010-05-05 18:18:07 -07:00

locks.c

[PATCH] Skip check for mandatory locks when unlocking

2010-03-17 12:07:16 -07:00

locks.h

ocfs2: POSIX file locks support

2008-10-13 13:57:57 -07:00

Makefile

ocfs2: allocation reservations

2010-05-05 18:17:30 -07:00

mmap.c

Merge branch 'cow_readahead' of git://oss.oracle.com/git/tma/linux-2.6 into merge-2

2010-09-10 08:41:04 -07:00

mmap.h

[PATCH] OCFS2: The Second Oracle Cluster Filesystem

2006-01-03 11:45:47 -08:00

namei.c

new helper: ihold()

2010-10-25 21:26:11 -04:00

namei.h

ocfs2: Create reflinked file in orphan dir.

2009-09-22 20:09:48 -07:00

ocfs1_fs_compat.h

fs/: Spelling fixes

2008-02-03 17:33:42 +02:00

ocfs2_fs.h

Merge branch 'globalheartbeat-2' of git://oss.oracle.com/git/smushran/linux-2.6 into ocfs2-merge-window

2010-10-15 13:03:09 -07:00

ocfs2_ioctl.h

Merge branch 'globalheartbeat-2' of git://oss.oracle.com/git/smushran/linux-2.6 into ocfs2-merge-window

2010-10-15 13:03:09 -07:00

ocfs2_lockid.h

ocfs2: Add new refcount tree lock resource in dlmglue.

2009-09-22 20:09:28 -07:00

ocfs2_lockingver.h

ocfs2_dlmfs: Enable the use of user cluster stacks.

2010-02-26 15:41:18 -08:00

ocfs2.h

ocfs2: char is not always signed

2010-11-18 14:10:56 -08:00

quota_global.c

ocfs2: Zero the tail cluster when extending past i_size.

2010-07-08 13:25:35 -07:00

quota_local.c

ocfs2: Zero the tail cluster when extending past i_size.

2010-07-08 13:25:35 -07:00

quota.h

ocfs2: Fix NULL pointer deref when writing local dquot

2010-05-21 19:30:48 +02:00

refcounttree.c

Merge branch 'globalheartbeat-2' of git://oss.oracle.com/git/smushran/linux-2.6 into ocfs2-merge-window

2010-10-15 13:03:09 -07:00

refcounttree.h

Merge branch 'cow_readahead' of git://oss.oracle.com/git/tma/linux-2.6 into merge-2

2010-09-10 08:41:04 -07:00

reservations.c

ocfs2: Move 'wanted' into parens of ocfs2_resmap_resv_bits.

2010-09-23 14:16:47 -07:00

reservations.h

ocfs2: make ocfs2_adjust_resv_from_alloc simple.

2010-05-05 18:18:09 -07:00

resize.c

ocfs2: Make ocfs2_journal_dirty() void.

2010-05-05 18:17:29 -07:00

resize.h

[PATCH 2/2] ocfs2: Implement group add for online resize

2008-01-25 15:04:24 -08:00

slot_map.c

When I tried to compile I got the following warning:

2010-10-11 13:45:52 -07:00

slot_map.h

ocfs2: De-magic the in-memory slot map.

2008-04-18 08:56:03 -07:00

stack_o2cb.c

ocfs2: Print message if user mounts without starting global heartbeat

2010-10-06 17:55:29 -07:00

stack_user.c

ocfs2_connection_find() returns pointer to bad structure

2010-11-18 15:41:41 -08:00

stackglue.c

ocfs2_dlmfs: Enable the use of user cluster stacks.

2010-02-26 15:41:18 -08:00

stackglue.h

ocfs2_dlmfs: Enable the use of user cluster stacks.

2010-02-26 15:41:18 -08:00

suballoc.c

Merge branch 'globalheartbeat-2' of git://oss.oracle.com/git/smushran/linux-2.6 into ocfs2-merge-window

2010-10-15 13:03:09 -07:00

suballoc.h

ocfs2: allow return of new inode block location before allocation of the inode

2010-09-08 14:25:59 +08:00

super.c

BKL: remove extraneous #include <smp_lock.h>

2010-11-17 08:59:32 -08:00

super.h

ocfs2: Wrap signal blocking in void functions.

2010-05-10 11:50:10 -07:00

symlink.c

ocfs2: Don't walk off the end of fast symlinks.

2010-09-29 17:33:05 -07:00

symlink.h

[PATCH] mark struct inode_operations const 2

2007-02-12 09:48:46 -08:00

sysfile.c

ocfs2: Cache system inodes of other slots.

2010-09-10 08:56:24 -07:00

sysfile.h

[PATCH] OCFS2: The Second Oracle Cluster Filesystem

2006-01-03 11:45:47 -08:00

uptodate.c

ocfs2/trivial: Remove trailing whitespaces

2010-01-25 19:20:51 -08:00

uptodate.h

ocfs2: Pass struct ocfs2_caching_info to the journal functions.

2009-09-04 16:07:50 -07:00

ver.c

ocfs2: bump version number

2008-01-25 15:05:46 -08:00

ver.h

[PATCH] OCFS2: The Second Oracle Cluster Filesystem

2006-01-03 11:45:47 -08:00

xattr.c

ocfs2: Avoid to evaluate xattr block flags again.

2010-10-15 13:03:43 -07:00

xattr.h

ocfs: constify xattr_handler

2010-05-21 18:31:20 -04:00