Jann Horn 3e0a396546 xfs: fix type confusion in xfs_ioc_swapext ... Without this check, the following XFS_I invocations would return bad pointers when used on non-XFS inodes (perhaps pointers into preceding allocator chunks). This could be used by an attacker to trick xfs_swap_extents into performing locking operations on attacker-chosen structures in kernel memory, potentially leading to code execution in the kernel. (I have not investigated how likely this is to be usable for an attack in practice.) Signed-off-by: Jann Horn <jann@thejh.net> Cc: Andy Lutomirski <luto@amacapital.net> Cc: Dave Chinner <david@fromorbit.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2016-07-16 06:30:06 +09:00
..
9p	Use the right predicate in ->atomic_open() instances	2016-07-05 16:02:23 -04:00
adfs
affs	affs: fix remount failure when there are no options changed	2016-05-28 16:50:24 -07:00
afs
autofs4	autofs: don't get stuck in a loop if vfs_write() returns an error	2016-06-24 17:23:52 -07:00
befs
bfs
btrfs	Merge branch 'for-linus-4.7-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs	2016-06-25 08:53:38 -07:00
cachefiles	FS-Cache: make check_consistency callback return int	2016-06-01 10:29:39 +02:00
ceph	Use the right predicate in ->atomic_open() instances	2016-07-05 16:02:23 -04:00
cifs	Use the right predicate in ->atomic_open() instances	2016-07-05 16:02:23 -04:00
coda
configfs	configfs: Remove ppos increment in configfs_write_bin_file	2016-06-30 11:28:55 +02:00
cramfs
crypto
debugfs	debugfs: open_proxy_open(): avoid double fops release	2016-06-15 04:56:35 -07:00
devpts	devpts: Make each mount of devpts an independent filesystem.	2016-06-05 10:36:01 -07:00
dlm
ecryptfs	ecryptfs: don't allow mmap when the lower fs doesn't support it	2016-07-08 10:35:28 -05:00
efivarfs
efs
exofs
exportfs
ext2	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-05-27 17:14:05 -07:00
ext4	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-05-27 17:14:05 -07:00
f2fs
fat
freevxfs
fscache	FS-Cache: wake write waiter after invalidating writes	2016-06-01 10:29:09 +02:00
fuse	Use the right predicate in ->atomic_open() instances	2016-07-05 16:02:23 -04:00
gfs2	Use the right predicate in ->atomic_open() instances	2016-07-05 16:02:23 -04:00
hfs	switch ->setxattr() to passing dentry and inode separately	2016-05-27 20:09:16 -04:00
hfsplus
hostfs
hpfs	hpfs: implement the show_options method	2016-05-28 16:50:24 -07:00
hugetlbfs
isofs
jbd2	jbd2: get rid of superfluous __GFP_REPEAT	2016-06-24 17:23:52 -07:00
jffs2
jfs
kernfs	switch ->setxattr() to passing dentry and inode separately	2016-05-27 20:09:16 -04:00
lockd	lockd: unregister notifier blocks if the service fails to come up completely	2016-06-30 16:35:07 -04:00
logfs
minix
ncpfs
nfs	nfs_atomic_open(): prevent parallel nfs_lookup() on a negative hashed	2016-07-05 16:02:31 -04:00
nfs_common
nfsd	nfsd: check permissions when setting ACLs	2016-06-24 12:11:52 -04:00
nilfs2	fs/nilfs2: fix potential underflow in call to crc32_le	2016-06-24 17:23:52 -07:00
nls
notify
ntfs
ocfs2	ocfs2: disable BUG assertions in reading blocks	2016-06-24 17:23:52 -07:00
omfs
openpromfs
orangefs
overlayfs	ovl: warn instead of error if d_type is not supported	2016-07-03 09:39:31 +02:00
proc	Merge branch 'stacking-fixes' (vfs stacking fixes from Jann)	2016-06-10 12:10:02 -07:00
pstore
qnx4
qnx6
quota
ramfs
reiserfs	Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs	2016-06-19 07:05:14 -10:00
romfs
squashfs
sysfs
sysv
tracefs
ubifs	UBIFS: Implement ->migratepage()	2016-06-23 00:29:53 +02:00
udf
ufs
xfs	xfs: fix type confusion in xfs_ioc_swapext	2016-07-16 06:30:06 +09:00
aio.c
anon_inodes.c
attr.c
bad_inode.c	switch ->setxattr() to passing dentry and inode separately	2016-05-27 20:09:16 -04:00
binfmt_aout.c	fs: fix binfmt_aout.c build error	2016-05-28 16:34:59 -07:00
binfmt_elf.c	coredump: fix dumping through pipes	2016-06-07 22:07:09 -04:00
binfmt_elf_fdpic.c	coredump: fix dumping through pipes	2016-06-07 22:07:09 -04:00
binfmt_em86.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c
block_dev.c
buffer.c
char_dev.c
compat.c
compat_binfmt_elf.c
compat_ioctl.c
coredump.c	coredump: fix dumping through pipes	2016-06-07 22:07:09 -04:00
dax.c	dax: fix offset overflow in dax_io	2016-06-27 12:18:44 -07:00
dcache.c	fix idiotic braino in d_alloc_parallel()	2016-06-20 10:07:42 -04:00
dcookies.c
direct-io.c
drop_caches.c
eventfd.c
eventpoll.c
exec.c
fcntl.c
fhandle.c
file.c
file_table.c
filesystems.c
fs-writeback.c	writeback: inode cgroup wb switch should not call ihold()	2016-06-30 13:58:41 -06:00
fs_pin.c
fs_struct.c
inode.c
internal.h	much milder d_walk() race	2016-06-10 11:32:47 -04:00
ioctl.c
Kconfig
Kconfig.binfmt
libfs.c	lockless next_positive()	2016-06-20 17:11:29 -04:00
locks.c	locks: use file_inode()	2016-07-01 10:24:18 -04:00
Makefile
mbcache.c
mount.h
mpage.c
namei.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-06-07 20:41:36 -07:00
namespace.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-07-01 15:20:11 -07:00
no-block.c
nsfs.c
open.c
pipe.c
pnode.c
pnode.h
posix_acl.c	posix_acl: Add set_posix_acl	2016-06-24 12:11:34 -04:00
proc_namespace.c
read_write.c
readdir.c
select.c
seq_file.c
signalfd.c
splice.c
stack.c
stat.c
statfs.c
super.c
sync.c
timerfd.c
userfaultfd.c
utimes.c
xattr.c	switch ->setxattr() to passing dentry and inode separately	2016-05-27 20:09:16 -04:00