diff options
| author | Boaz Harrosh <bharrosh@panasas.com> | 2012-08-01 17:48:36 +0300 |
|---|---|---|
| committer | Boaz Harrosh <bharrosh@panasas.com> | 2012-08-02 16:41:56 +0300 |
| commit | 9e62bb4458ad2cf28bd701aa5fab380b846db326 (patch) | |
| tree | 951e8ec30887eba0506b0e673f4d26f9ad76591f /mm/debug-pagealloc.c | |
| parent | be388f3d9af4155db0dc9e7e59dd49db90271c1c (diff) | |
| download | op-kernel-dev-9e62bb4458ad2cf28bd701aa5fab380b846db326.zip op-kernel-dev-9e62bb4458ad2cf28bd701aa5fab380b846db326.tar.gz | |
ore: Fix out-of-bounds access in _ios_obj()
_ios_obj() is accessed by group_index not device_table index.
The oc->comps array is only a group_full of devices at a time
it is not like ore_comp_dev() which is indexed by a global
device_table index.
This did not BUG until now because exofs only uses a single
COMP for all devices. But with other FSs like PanFS this is
not true.
This bug was only in the write_path, all other users were
using it correctly
[This is a bug since 3.2 Kernel]
CC: Stable Tree <stable@kernel.org>
Signed-off-by: Boaz Harrosh <bharrosh@panasas.com>
Diffstat (limited to 'mm/debug-pagealloc.c')
0 files changed, 0 insertions, 0 deletions
