diff options
| author | David Howells <dhowells@redhat.com> | 2025-04-08 23:46:29 +0300 |
|---|---|---|
| committer | Christian Brauner <brauner@kernel.org> | 2025-04-11 16:24:29 +0300 |
| commit | a64e4d48a0b77e4ada19ac26ca3a08cd492f6362 (patch) | |
| tree | 2c198cd64c04444fc0e43e187974d49e60fe3cb2 /tools/perf/scripts/python/export-to-sqlite.py | |
| parent | bb5e07cb927724e0b47be371fa081141cfb14414 (diff) | |
| download | linux-a64e4d48a0b77e4ada19ac26ca3a08cd492f6362.tar.xz | |
afs: Fix afs_dynroot_readdir() to not use the RCU read lock
afs_dynroot_readdir() uses the RCU read lock to walk the cell list whilst
emitting cell automount entries - but dir_emit() may write to a userspace
buffer, thereby causing a fault to occur and waits to happen.
Fix afs_dynroot_readdir() to get a shared lock on net->cells_lock instead.
This can be triggered by enabling lockdep, preconfiguring a number of
cells, doing "mount -t afs none /afs -o dyn" (or using the kafs-client
package with afs.mount systemd unit enabled) and then doing "ls /afs".
Fixes: 1d0b929fc070 ("afs: Change dynroot to create contents on demand")
Reported-by: syzbot+3b6c5c6a1d0119b687a1@syzkaller.appspotmail.com
Reported-by: syzbot+8245611446194a52150d@syzkaller.appspotmail.com
Reported-by: syzbot+1aa62e6852a6ad1c7944@syzkaller.appspotmail.com
Reported-by: syzbot+54e6c2176ba76c56217e@syzkaller.appspotmail.com
Signed-off-by: David Howells <dhowells@redhat.com>
Link: https://lore.kernel.org/1638014.1744145189@warthog.procyon.org.uk
cc: Marc Dionne <marc.dionne@auristor.com>
cc: linux-afs@lists.infradead.org
cc: linux-fsdevel@vger.kernel.org
Signed-off-by: Christian Brauner <brauner@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-sqlite.py')
0 files changed, 0 insertions, 0 deletions