From: Greg Kroah-Hartman Date: Sun, 24 Mar 2019 19:36:49 +0000 (+0100) Subject: 3.18-stable patches X-Git-Tag: v4.9.166~47 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=7f63f4db30f692584584d62407afe2dd602a9e64;p=thirdparty%2Fkernel%2Fstable-queue.git 3.18-stable patches added patches: udf-fix-crash-on-io-error-during-truncate.patch --- diff --git a/queue-3.18/series b/queue-3.18/series new file mode 100644 index 00000000000..0fc7b93b4e6 --- /dev/null +++ b/queue-3.18/series @@ -0,0 +1 @@ +udf-fix-crash-on-io-error-during-truncate.patch diff --git a/queue-3.18/udf-fix-crash-on-io-error-during-truncate.patch b/queue-3.18/udf-fix-crash-on-io-error-during-truncate.patch new file mode 100644 index 00000000000..9ec6fc4335f --- /dev/null +++ b/queue-3.18/udf-fix-crash-on-io-error-during-truncate.patch @@ -0,0 +1,38 @@ +From d3ca4651d05c0ff7259d087d8c949bcf3e14fb46 Mon Sep 17 00:00:00 2001 +From: Jan Kara +Date: Mon, 11 Mar 2019 15:04:18 +0100 +Subject: udf: Fix crash on IO error during truncate + +From: Jan Kara + +commit d3ca4651d05c0ff7259d087d8c949bcf3e14fb46 upstream. + +When truncate(2) hits IO error when reading indirect extent block the +code just bugs with: + +kernel BUG at linux-4.15.0/fs/udf/truncate.c:249! +... + +Fix the problem by bailing out cleanly in case of IO error. + +CC: stable@vger.kernel.org +Reported-by: jean-luc malet +Signed-off-by: Jan Kara +Signed-off-by: Greg Kroah-Hartman + +--- + fs/udf/truncate.c | 3 +++ + 1 file changed, 3 insertions(+) + +--- a/fs/udf/truncate.c ++++ b/fs/udf/truncate.c +@@ -261,6 +261,9 @@ void udf_truncate_extents(struct inode * + epos.block = eloc; + epos.bh = udf_tread(sb, + udf_get_lb_pblock(sb, &eloc, 0)); ++ /* Error reading indirect block? */ ++ if (!epos.bh) ++ return; + if (elen) + indirect_ext_len = + (elen + sb->s_blocksize - 1) >> diff --git a/queue-4.14/series b/queue-4.14/series new file mode 100644 index 00000000000..d560893e01b --- /dev/null +++ b/queue-4.14/series @@ -0,0 +1,8 @@ +mmc-pxamci-fix-enum-type-confusion.patch +drm-vmwgfx-don-t-double-free-the-mode-stored-in-par-set_mode.patch +iommu-amd-fix-sg-dma_address-for-sg-offset-bigger-than-page_size.patch +libceph-wait-for-latest-osdmap-in-ceph_monc_blacklist_add.patch +udf-fix-crash-on-io-error-during-truncate.patch +mips-loongson64-lemote-2f-add-irqf_no_suspend-to-cascade-irqaction.patch +mips-ensure-elf-appended-dtb-is-relocated.patch +mips-fix-kernel-crash-for-r6-in-jump-label-branch-function.patch diff --git a/queue-4.19/series b/queue-4.19/series new file mode 100644 index 00000000000..35bda590e84 --- /dev/null +++ b/queue-4.19/series @@ -0,0 +1,14 @@ +alsa-hda-add-lenovo-ideacentre-b550-to-the-power_save_blacklist.patch +alsa-firewire-motu-use-version-field-of-unit-directory-to-identify-model.patch +mmc-pxamci-fix-enum-type-confusion.patch +mmc-mxcmmc-revert-mmc-mxcmmc-handle-highmem-pages.patch +mmc-renesas_sdhi-limit-block-count-to-16-bit-for-old-revisions.patch +drm-vmwgfx-don-t-double-free-the-mode-stored-in-par-set_mode.patch +drm-vmwgfx-return-0-when-gmrid-get_node-runs-out-of-id-s.patch +iommu-amd-fix-sg-dma_address-for-sg-offset-bigger-than-page_size.patch +libceph-wait-for-latest-osdmap-in-ceph_monc_blacklist_add.patch +udf-fix-crash-on-io-error-during-truncate.patch +mips-loongson64-lemote-2f-add-irqf_no_suspend-to-cascade-irqaction.patch +mips-ensure-elf-appended-dtb-is-relocated.patch +mips-fix-kernel-crash-for-r6-in-jump-label-branch-function.patch +powerpc-vdso64-fix-clock_monotonic-inconsistencies-across-y2038.patch diff --git a/queue-4.4/series b/queue-4.4/series new file mode 100644 index 00000000000..cdbe06ed287 --- /dev/null +++ b/queue-4.4/series @@ -0,0 +1,5 @@ +mmc-pxamci-fix-enum-type-confusion.patch +drm-vmwgfx-don-t-double-free-the-mode-stored-in-par-set_mode.patch +udf-fix-crash-on-io-error-during-truncate.patch +mips-loongson64-lemote-2f-add-irqf_no_suspend-to-cascade-irqaction.patch +mips-fix-kernel-crash-for-r6-in-jump-label-branch-function.patch diff --git a/queue-4.9/series b/queue-4.9/series new file mode 100644 index 00000000000..d560893e01b --- /dev/null +++ b/queue-4.9/series @@ -0,0 +1,8 @@ +mmc-pxamci-fix-enum-type-confusion.patch +drm-vmwgfx-don-t-double-free-the-mode-stored-in-par-set_mode.patch +iommu-amd-fix-sg-dma_address-for-sg-offset-bigger-than-page_size.patch +libceph-wait-for-latest-osdmap-in-ceph_monc_blacklist_add.patch +udf-fix-crash-on-io-error-during-truncate.patch +mips-loongson64-lemote-2f-add-irqf_no_suspend-to-cascade-irqaction.patch +mips-ensure-elf-appended-dtb-is-relocated.patch +mips-fix-kernel-crash-for-r6-in-jump-label-branch-function.patch diff --git a/queue-5.0/series b/queue-5.0/series new file mode 100644 index 00000000000..042b84c596f --- /dev/null +++ b/queue-5.0/series @@ -0,0 +1,20 @@ +alsa-hda-add-lenovo-ideacentre-b550-to-the-power_save_blacklist.patch +alsa-firewire-motu-use-version-field-of-unit-directory-to-identify-model.patch +mmc-pxamci-fix-enum-type-confusion.patch +mmc-alcor-fix-dma-reads.patch +mmc-mxcmmc-revert-mmc-mxcmmc-handle-highmem-pages.patch +mmc-renesas_sdhi-limit-block-count-to-16-bit-for-old-revisions.patch +drm-amdgpu-fix-invalid-use-of-change_bit.patch +drm-vmwgfx-don-t-double-free-the-mode-stored-in-par-set_mode.patch +drm-vmwgfx-return-0-when-gmrid-get_node-runs-out-of-id-s.patch +iommu-amd-fix-sg-dma_address-for-sg-offset-bigger-than-page_size.patch +iommu-iova-fix-tracking-of-recently-failed-iova-address.patch +libceph-wait-for-latest-osdmap-in-ceph_monc_blacklist_add.patch +udf-fix-crash-on-io-error-during-truncate.patch +mips-loongson64-lemote-2f-add-irqf_no_suspend-to-cascade-irqaction.patch +mips-ensure-elf-appended-dtb-is-relocated.patch +mips-fix-kernel-crash-for-r6-in-jump-label-branch-function.patch +powerpc-vdso64-fix-clock_monotonic-inconsistencies-across-y2038.patch +powerpc-mm-only-define-max_physmem_bits-in-sparsemem-configurations.patch +powerpc-security-fix-spectre_v2-reporting.patch +net-mlx5-fix-dct-creation-bad-flow.patch