Mateusz Jurczyk c2ace3043f fuse: initialize the flock flag in fuse_file on allocation ...

commit 68227c03cba84a24faf8a7277d2b1a03c8959c2c upstream.

Before the patch, the flock flag could remain uninitialized for the
lifespan of the fuse_file allocation. Unless set to true in
fuse_file_flock(), it would remain in an indeterminate state until read in
an if statement in fuse_release_common(). This could consequently lead to
taking an unexpected branch in the code.

The bug was discovered by a runtime instrumentation designed to detect use
of uninitialized memory in the kernel.

Signed-off-by: Mateusz Jurczyk <mjurczyk@google.com>
Fixes: 37fb3a30b4 ("fuse: fix flock")
Cc: <stable@vger.kernel.org> # v3.1+
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Willy Tarreau <w@1wt.eu>

2017-11-01 22:12:44 +01:00

..

9p

posix_acl: Clear SGID bit when setting file permissions

2017-06-08 00:46:47 +02:00

adfs

fs: Limit sys_mount to only request filesystem modules.

2013-03-03 19:36:31 -08:00

affs

move d_rcu from overlapping d_child to overlapping d_alias

2015-04-29 10:34:00 +02:00

afs

aio: don't include aio.h in sched.h

2013-05-07 20:16:25 -07:00

autofs4

move d_rcu from overlapping d_child to overlapping d_alias

2015-04-29 10:34:00 +02:00

befs

befs_readdir(): do not increment ->f_pos if filldir tells us to stop

2013-05-31 15:17:56 -04:00

bfs

fs: Limit sys_mount to only request filesystem modules.

2013-03-03 19:36:31 -08:00

btrfs

Btrfs: fix memory leak in reading btree blocks

2017-06-19 20:28:15 +02:00

cachefiles

lift sb_start_write() out of ->write()

2013-04-09 14:12:56 -04:00

ceph

move d_rcu from overlapping d_child to overlapping d_alias

2015-04-29 10:34:00 +02:00

cifs

Reset TreeId to zero on SMB2 TREE_CONNECT

2017-06-20 14:04:42 +02:00

coda

move d_rcu from overlapping d_child to overlapping d_alias

2015-04-29 10:34:00 +02:00

configfs

configfs: fix race between dentry put and lookup

2013-11-29 11:11:53 -08:00

cramfs

fs: Limit sys_mount to only request filesystem modules.

2013-03-03 19:36:31 -08:00

debugfs

move d_rcu from overlapping d_child to overlapping d_alias

2015-04-29 10:34:00 +02:00

devpts

pty: make sure super_block is still valid in final /dev/tty close

2016-02-25 11:57:46 -08:00

dlm

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2013-05-01 14:08:52 -07:00

ecryptfs

ecryptfs: don't allow mmap when the lower fs doesn't support it

2016-08-27 11:40:31 +02:00

efivarfs

efi: Make efivarfs entries immutable by default

2016-03-16 08:41:37 -07:00

efs

fs: Limit sys_mount to only request filesystem modules.

2013-03-03 19:36:31 -08:00

exofs

ore: Fix wrong math in allocation of per device BIO

2014-02-13 13:48:00 -08:00

exportfs

move d_rcu from overlapping d_child to overlapping d_alias

2015-04-29 10:34:00 +02:00

ext2

posix_acl: Clear SGID bit when setting file permissions

2017-06-08 00:46:47 +02:00

ext3

posix_acl: Clear SGID bit when setting file permissions

2017-06-08 00:46:47 +02:00

ext4

ext4: fix overflow caused by missing cast in ext4_resize_fs()

2017-11-01 22:12:44 +01:00

f2fs

f2fs: set ->owner for debugfs status file's file_operations

2017-06-08 00:46:49 +02:00

fat

fat: fix using uninitialized fields of fat_inode/fsinfo_inode

2017-06-20 14:04:27 +02:00

freevxfs

fs: Readd the fs module aliases.

2013-03-12 18:55:21 -07:00

fscache

FS-Cache: Increase reference of parent after registering, netfs success

2016-02-19 14:22:41 -08:00

fuse

fuse: initialize the flock flag in fuse_file on allocation

2017-11-01 22:12:44 +01:00

gfs2

gfs2: avoid uninitialized variable warning

2017-06-20 14:04:50 +02:00

hfs

hfs,hfsplus: cache pages correctly between bnode_create and bnode_free

2015-10-01 12:07:34 +02:00

hfsplus

hfs,hfsplus: cache pages correctly between bnode_create and bnode_free

2015-10-01 12:07:34 +02:00

hostfs

hostfs: Freeing an ERR_PTR in hostfs_fill_sb_common()

2017-02-10 11:03:30 +01:00

hpfs

hpfs: update ctime and mtime on directory modification

2015-09-21 10:00:10 -07:00

hppfs

hppfs: get rid of ->fsync()

2013-04-29 15:41:42 -04:00

hugetlbfs

mm: larger stack guard gap, between vmas

2017-06-21 15:42:43 +02:00

isofs

isofs: Do not return EACCES for unknown filesystems

2017-02-10 11:03:30 +01:00

jbd

Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs

2013-05-03 09:56:25 -07:00

jbd2

jbd2: don't leak modified metadata buffers on an aborted journal

2017-06-20 08:02:35 +02:00

jffs2

posix_acl: Clear SGID bit when setting file permissions

2017-06-08 00:46:47 +02:00

jfs

posix_acl: Clear SGID bit when setting file permissions

2017-06-08 00:46:47 +02:00

lockd

lockd: create NSM handles per net namespace

2016-03-03 15:06:20 -08:00

logfs

block: Remove bi_idx references

2013-03-23 14:15:31 -07:00

minix

fs: Limit sys_mount to only request filesystem modules.

2013-03-03 19:36:31 -08:00

ncpfs

move d_rcu from overlapping d_child to overlapping d_alias

2015-04-29 10:34:00 +02:00

nfs

NFSv4: fix getacl ERANGE for some ACL buffer sizes

2017-06-20 14:04:24 +02:00

nfs_common

nfs_common: Update the translation between nfsv3 acls linux posix acls

2013-02-13 06:15:14 -08:00

nfsd

nfsd: check for oversized NFSv2/v3 arguments

2017-06-20 14:04:53 +02:00

nilfs2

fs/nilfs2: fix potential underflow in call to crc32_le

2016-08-27 11:40:30 +02:00

nls

…

notify

fsnotify: fix oops in fsnotify_clear_marks_by_group_flags()

2015-08-16 20:51:35 -07:00

ntfs

aio: don't include aio.h in sched.h

2013-05-07 20:16:25 -07:00

ocfs2

ocfs2: fix BUG_ON() in ocfs2_ci_checkpointed()

2017-06-20 08:03:01 +02:00

omfs

fs, omfs: add NULL terminator in the end up the token list

2015-06-05 23:19:54 -07:00

openpromfs

fs: Limit sys_mount to only request filesystem modules.

2013-03-03 19:36:31 -08:00

proc

mm: larger stack guard gap, between vmas

2017-06-21 15:42:43 +02:00

pstore

pstore/ram: Use memcpy_fromio() to save old buffer

2017-02-10 11:04:02 +01:00

qnx4

fs: Limit sys_mount to only request filesystem modules.

2013-03-03 19:36:31 -08:00

qnx6

qnx6: qnx6_readdir() has a braino in pos calculation

2013-05-31 15:17:31 -04:00

quota

quota: provide interface for readding allocated space into reserved space

2015-01-29 17:40:57 -08:00

ramfs

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-02-26 20:16:07 -08:00

reiserfs

posix_acl: Clear SGID bit when setting file permissions

2017-06-08 00:46:47 +02:00

romfs

romfs: fix nommu map length to keep inside filesystem

2013-04-29 09:17:57 +10:00

squashfs

fs: Limit sys_mount to only request filesystem modules. (Part 3)

2013-03-11 07:09:48 -07:00

sysfs

sysfs: check if one entry has been removed before freeing

2013-04-05 15:35:52 -07:00

sysv

fix sysvfs symlinks

2016-02-19 14:22:39 -08:00

ubifs

ubifs: Fix journal replay wrt. xattr nodes

2017-06-08 00:46:56 +02:00

udf

udf: Check output buffer length when converting name to CS0

2016-02-25 11:57:48 -08:00

ufs

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial

2013-04-30 09:36:50 -07:00

xfs

cancel the setfilesize transation when io error happen

2017-06-20 14:04:32 +02:00

aio.c

AIO: properly check iovec sizes

2016-02-25 11:57:46 -08:00

anon_inodes.c

get_empty_filp()/alloc_file() leave both ->f_pos and ->f_version zero

2013-02-26 02:46:11 -05:00

attr.c

fs,userns: Change inode_capable to capable_wrt_inode_uidgid

2014-06-16 13:42:52 -07:00

bad_inode.c

…

binfmt_aout.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-01 17:51:54 -07:00

binfmt_elf_fdpic.c

Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/benh/powerpc

2013-05-02 10:16:16 -07:00

binfmt_elf.c

binfmt_elf: Don't clobber passed executable's file header

2016-02-19 14:22:41 -08:00

binfmt_em86.c

…

binfmt_flat.c

new helper: read_code()

2013-04-29 15:40:23 -04:00

binfmt_misc.c

binfmt_misc: reuse string_unescape_inplace()

2013-04-30 17:04:03 -07:00

binfmt_script.c

…

binfmt_som.c

…

bio-integrity.c

bio-integrity: Fix bio_integrity_verify segment start bug

2014-03-23 21:38:21 -07:00

bio.c

block: Fix bio_copy_data()

2013-10-05 07:13:09 -07:00

block_dev.c

block: protect iterate_bdevs() against concurrent close

2017-06-08 00:46:49 +02:00

buffer.c

vfs: fix data corruption when blocksize < pagesize for mmaped data

2014-11-14 08:47:54 -08:00

char_dev.c

…

compat_binfmt_elf.c

…

compat_ioctl.c

Removed unused typedef to avoid "unused local typedef" warnings.

2013-05-04 15:03:05 -04:00

compat.c

aio: don't include aio.h in sched.h

2013-05-07 20:16:25 -07:00

coredump.c

coredump: fix unfreezable coredumping task

2017-02-06 23:33:05 +01:00

coredump.h

…

dcache.c

move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon)

2017-06-20 14:04:14 +02:00

dcookies.c

fs/compat: fix lookup_dcookie() parameter handling

2014-02-13 13:48:00 -08:00

direct-io.c

leak in O_DIRECT readv past the EOF

2017-11-01 22:12:42 +01:00

drop_caches.c

…

eventfd.c

…

eventpoll.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/signal

2013-05-01 07:21:43 -07:00

exec.c

fs/exec.c: account for argv/envp pointers

2017-11-01 22:12:42 +01:00

fcntl.c

new helper: file_inode(file)

2013-02-22 23:31:31 -05:00

fhandle.c

vfs: read file_handle only once in handle_to_path

2015-06-05 23:20:00 -07:00

file_table.c

get rid of s_files and files_lock

2015-07-03 19:48:08 -07:00

file.c

fs/file.c:fdtable: avoid triggering OOMs from alloc_fdmem

2014-02-22 12:41:25 -08:00

filesystems.c

fs: Limit sys_mount to only request filesystem modules.

2013-03-03 19:36:31 -08:00

fs_struct.c

constify path_get/path_put and fs_struct.c stuff

2013-03-01 23:51:07 -05:00

fs-writeback.c

writeback: fix a subtle race condition in I_DIRTY clearing

2015-01-16 06:59:02 -08:00

generic_acl.c

tmpfs: clear S_ISGID when setting posix ACLs

2017-06-08 00:46:47 +02:00

inode.c

fs: Fix S_NOSEC handling

2015-07-10 10:40:22 -07:00

internal.h

get rid of s_files and files_lock

2015-07-03 19:48:08 -07:00

ioctl.c

new helper: file_inode(file)

2013-02-22 23:31:31 -05:00

ioprio.c

block: fix use-after-free in sys_ioprio_get()

2017-06-20 08:02:37 +02:00

Kconfig

efivarfs: Move to fs/efivarfs

2013-04-17 13:25:09 +01:00

Kconfig.binfmt

fs: make binfmt support for #! scripts modular and removable

2013-04-30 17:04:04 -07:00

libfs.c

move d_rcu from overlapping d_child to overlapping d_alias

2015-04-29 10:34:00 +02:00

locks.c

locks: fix unlock when fcntl_setlk races with a close

2016-03-09 15:31:53 -08:00

Makefile

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-01 17:51:54 -07:00

mbcache.c

…

mount.h

vfs: Is mounted should be testing mnt_ns for NULL or error.

2014-02-06 11:08:16 -08:00

mpage.c

…

namei.c

do_last(): don't let a bogus return value from ->open() et.al. to confuse us

2016-03-03 15:06:24 -08:00

namespace.c

umount: Disallow unprivileged mount force

2015-01-08 09:58:16 -08:00

no-block.c

…

open.c

get rid of s_files and files_lock

2015-07-03 19:48:08 -07:00

pipe.c

pipe: limit the per-user amount of pages allocated in pipes

2016-08-21 23:22:36 +02:00

pnode.c

vfs: Fix invalid ida_remove() call

2013-05-31 15:16:33 -04:00

pnode.h

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-01 17:51:54 -07:00

posix_acl.c

posix_acl: Clear SGID bit when setting file permissions

2017-06-08 00:46:47 +02:00

proc_namespace.c

…

read_write.c

fs/compat: fix parameter handling for compat readv/writev syscalls

2014-02-13 13:48:00 -08:00

readdir.c

new helper: file_inode(file)

2013-02-22 23:31:31 -05:00

select.c

sched/rt: Move rt specific bits into new header file

2013-02-07 20:51:08 +01:00

seq_file.c

fs/seq_file: fix out-of-bounds read

2017-02-10 11:03:29 +01:00

signalfd.c

signalfd: fix information leak in signalfd_copyinfo

2015-08-16 20:51:42 -07:00

splice.c

vfs: fix uninitialized flags in splice_to_pipe()

2017-06-20 14:04:20 +02:00

stack.c

…

stat.c

quota: provide interface for readding allocated space into reserved space

2015-01-29 17:40:57 -08:00

statfs.c

vfs: allow O_PATH file descriptors for fstatfs()

2013-10-18 07:45:44 -07:00

super.c

fs/super.c: fix race between freeze_super() and thaw_super()

2017-02-10 11:03:29 +01:00

sync.c

teach SYSCALL_DEFINE<n> how to deal with long long/unsigned long long

2013-03-03 22:46:22 -05:00

timerfd.c

compat: restore timerfd settime and gettime compat syscalls

2013-03-02 09:35:13 -05:00

utimes.c

…

xattr_acl.c

…

xattr.c

…