From 1742b4200b6adf1165191a46bf1bb36e8cffa668 Mon Sep 17 00:00:00 2001 From: Greg Kroah-Hartman Date: Wed, 21 Feb 2018 10:42:37 +0100 Subject: [PATCH] drop vfs patch from 3.18 --- queue-3.18/series | 1 - ...n-t-do-rcu-lookup-of-empty-pathnames.patch | 48 ------------------- 2 files changed, 49 deletions(-) delete mode 100644 queue-3.18/vfs-don-t-do-rcu-lookup-of-empty-pathnames.patch diff --git a/queue-3.18/series b/queue-3.18/series index d4b0e482678..c4e6ee49cc1 100644 --- a/queue-3.18/series +++ b/queue-3.18/series @@ -13,4 +13,3 @@ console-dummy-leave-.con_font_get-set-to-null.patch btrfs-fix-deadlock-in-run_delalloc_nocow.patch btrfs-fix-crash-due-to-not-cleaning-up-tree-log-block-s-dirty-bits.patch alsa-seq-fix-racy-pool-initializations.patch -vfs-don-t-do-rcu-lookup-of-empty-pathnames.patch diff --git a/queue-3.18/vfs-don-t-do-rcu-lookup-of-empty-pathnames.patch b/queue-3.18/vfs-don-t-do-rcu-lookup-of-empty-pathnames.patch deleted file mode 100644 index 95d01d71cfd..00000000000 --- a/queue-3.18/vfs-don-t-do-rcu-lookup-of-empty-pathnames.patch +++ /dev/null @@ -1,48 +0,0 @@ -From c0eb027e5aef70b71e5a38ee3e264dc0b497f343 Mon Sep 17 00:00:00 2001 -From: Linus Torvalds -Date: Sun, 2 Apr 2017 17:10:08 -0700 -Subject: vfs: don't do RCU lookup of empty pathnames - -From: Linus Torvalds - -commit c0eb027e5aef70b71e5a38ee3e264dc0b497f343 upstream. - -Normal pathname lookup doesn't allow empty pathnames, but using -AT_EMPTY_PATH (with name_to_handle_at() or fstatat(), for example) you -can trigger an empty pathname lookup. - -And not only is the RCU lookup in that case entirely unnecessary -(because we'll obviously immediately finalize the end result), it is -actively wrong. - -Why? An empth path is a special case that will return the original -'dirfd' dentry - and that dentry may not actually be RCU-free'd, -resulting in a potential use-after-free if we were to initialize the -path lazily under the RCU read lock and depend on complete_walk() -finalizing the dentry. - -Found by syzkaller and KASAN. - -Reported-by: Dmitry Vyukov -Reported-by: Vegard Nossum -Acked-by: Al Viro -Signed-off-by: Linus Torvalds -Cc: Eric Biggers -Signed-off-by: Greg Kroah-Hartman - ---- - fs/namei.c | 3 +++ - 1 file changed, 3 insertions(+) - ---- a/fs/namei.c -+++ b/fs/namei.c -@@ -1851,6 +1851,9 @@ static int path_init(int dfd, const char - { - int retval = 0; - -+ if (!*s) -+ flags &= ~LOOKUP_RCU; -+ - nd->last_type = LAST_ROOT; /* if there are only slashes... */ - nd->flags = flags | LOOKUP_JUMPED; - nd->depth = 0; -- 2.47.2