linux-toradex.git/fs/sysfs, branch v2.6.16.27

[PATCH] sysfs: zero terminate sysfs write buffers (CVE-2006-1055)

2006-04-07T16:44:26+00:00

No one should be writing a PAGE_SIZE worth of data to a normal sysfs
file, so properly terminate the buffer.

Thanks to Al Viro for pointing out my stupidity here.

CVE-2006-1055 has been assigned for this.

Signed-off-by: Greg Kroah-Hartman

[PATCH] sysfs: fix a kobject leak in sysfs_add_link on the error path

2006-03-28T06:47:30+00:00

As pointed out by Oliver Neukum.

Cc: Maneesh Soni 
Cc: Oliver Neukum 
Signed-off-by: Greg Kroah-Hartman

[PATCH] sysfs: sysfs_remove_dir() needs to invalidate the dentry

2006-03-28T06:47:30+00:00

When calling sysfs_remove_dir() don't allow any further sysfs functions
to work for this kobject anymore.  This fixes a nasty USB cdc-acm oops
on disconnect.

Many thanks to Bob Copeland and Paul Fulghum for taking the time to
track this down.

Cc: Bob Copeland 
Cc: Paul Fulghum 
Cc: Maneesh Soni 
Signed-off-by: Greg Kroah-Hartman

[PATCH] capable/capability.h (fs/)

2006-01-12T02:42:13+00:00

fs: Use  where capable() is used.

Signed-off-by: Randy Dunlap 
Acked-by: Tim Schmielau 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

[PATCH] mutex subsystem, semaphore to mutex: VFS, ->i_sem

2006-01-09T23:59:24+00:00

This patch converts the inode semaphore to a mutex. I have tested it on
XFS and compiled as much as one can consider on an ia64. Anyway your
luck with it might be different.

Modified-by: Ingo Molnar 

(finished the conversion)

Signed-off-by: Jes Sorensen 
Signed-off-by: Ingo Molnar

[PATCH] sysfs: handle failures in sysfs_make_dirent

2006-01-05T00:18:09+00:00

I noticed that if sysfs_make_dirent fails to allocate the sd, then a
null will be passed to sysfs_put.

Signed-off-by: Steven Rostedt 
Signed-off-by: Greg Kroah-Hartman

[PATCH] Fix oops in sysfs_hash_and_remove_file()

2005-08-27T02:37:13+00:00

The problem arises if an entity in sysfs is created and removed without
ever having been made completely visible.  In SCSI this is triggered by
removing a device while it's initialising.

The problem appears to be that because it was never made visible in sysfs,
the sysfs dentry has a null d_inode which oopses when a reference is made
to it.  The solution is simply to check d_inode and assume the object was
never made visible (and thus doesn't need deleting) if it's NULL.

(akpm: possibly a stopgap for 2.6.13 scsi problems.  May not be the
long-term fix)

Signed-off-by: James Bottomley 
Cc: Greg KH 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

Fix nasty ncpfs symlink handling bug.

2005-08-20T01:02:56+00:00

This bug could cause oopses and page state corruption, because ncpfs
used the generic page-cache symlink handlign functions.  But those
functions only work if the page cache is guaranteed to be "stable", ie a
page that was installed when the symlink walk was started has to still
be installed in the page cache at the end of the walk.

We could have fixed ncpfs to not use the generic helper routines, but it
is in many ways much cleaner to instead improve on the symlink walking
helper routines so that they don't require that absolute stability.

We do this by allowing "follow_link()" to return a error-pointer as a
cookie, which is fed back to the cleanup "put_link()" routine.  This
also simplifies NFS symlink handling.

Signed-off-by: Linus Torvalds

[PATCH] sysfs: fix sysfs_setattr

2005-07-29T20:12:49+00:00

o sysfs_dirent's s_mode field should also be updated in sysfs_setattr(), else
  there could be inconsistency in the two fields. s_mode is used while
  ->readdir so as not to bring in the inode to cache.

Signed-off-by: Maneesh Soni 
Signed-off-by: Greg Kroah-Hartman 
Signed-off-by: Linus Torvalds

[PATCH] sysfs: fix sysfs_chmod_file

2005-07-29T20:12:49+00:00

o sysfs_chmod_file() must update the new iattr field in sysfs_dirent else
  the mode change will not be persistent in case of inode evacuation from
  cache.

Signed-off-by: Maneesh Soni 
Signed-off-by: Greg Kroah-Hartman 
Signed-off-by: Linus Torvalds