mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2024-12-01 08:04:22 +08:00
af5eb745ef
In ntfs_mft_record_alloc() when mapping the new extent mft record with map_extent_mft_record() we overwrite @m with the return value and on error, we then try to use the old @m but that is no longer there as @m now contains an error code instead so we crash when dereferencing the error code as if it were a pointer. The simple fix is to use a temporary variable to store the return value thus preserving the original @m for later use. This is a backport from the commercial Tuxera-NTFS driver and is well tested... Thanks go to Julia Lawall for pointing this out (whilst I had fixed it in the commercial driver I had failed to fix it in the Linux kernel). Signed-off-by: Anton Altaparmakov <anton@tuxera.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> |
||
---|---|---|
.. | ||
aops.c | ||
aops.h | ||
attrib.c | ||
attrib.h | ||
bitmap.c | ||
bitmap.h | ||
collate.c | ||
collate.h | ||
compress.c | ||
debug.c | ||
debug.h | ||
dir.c | ||
dir.h | ||
endian.h | ||
file.c | ||
index.c | ||
index.h | ||
inode.c | ||
inode.h | ||
Kconfig | ||
layout.h | ||
lcnalloc.c | ||
lcnalloc.h | ||
logfile.c | ||
logfile.h | ||
Makefile | ||
malloc.h | ||
mft.c | ||
mft.h | ||
mst.c | ||
namei.c | ||
ntfs.h | ||
quota.c | ||
quota.h | ||
runlist.c | ||
runlist.h | ||
super.c | ||
sysctl.c | ||
sysctl.h | ||
time.h | ||
types.h | ||
unistr.c | ||
upcase.c | ||
usnjrnl.c | ||
usnjrnl.h | ||
volume.h |