)]}' { "log": [ { "commit": "434a964daa14b9db083ce20404a4a2add54d037a", "tree": "fedba22e5bc94798d96a6b895f3129043b807a15", "parents": [ "3069083cc8def2ffad8520f0f24c6f95f140aac5" ], "author": { "name": "Phillip Lougher", "email": "plougher@redhat.com", "time": "Wed Nov 02 13:38:01 2011 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Nov 02 16:06:59 2011 -0700" }, "message": "hfs: fix hfs_find_init() sb-\u003eext_tree NULL ptr oops\n\nClement Lecigne reports a filesystem which causes a kernel oops in\nhfs_find_init() trying to dereference sb-\u003eext_tree which is NULL.\n\nThis proves to be because the filesystem has a corrupted MDB extent\nrecord, where the extents file does not fit into the first three extents\nin the file record (the first blocks).\n\nIn hfs_get_block() when looking up the blocks for the extent file\n(HFS_EXT_CNID), it fails the first blocks special case, and falls\nthrough to the extent code (which ultimately calls hfs_find_init())\nwhich is in the process of being initialised.\n\nHfs avoids this scenario by always having the extents b-tree fitting\ninto the first blocks (the extents B-tree can\u0027t have overflow extents).\n\nThe fix is to check at mount time that the B-tree fits into first\nblocks, i.e. fail if HFS_I(inode)-\u003ealloc_blocks \u003e\u003d\nHFS_I(inode)-\u003efirst_blocks\n\nNote, the existing commit 47f365eb57573 (\"hfs: fix oops on mount with\ncorrupted btree extent records\") becomes subsumed into this as a special\ncase, but only for the extents B-tree (HFS_EXT_CNID), it is perfectly\nacceptable for the catalog B-Tree file to grow beyond three extents,\nwith the remaining extent descriptors in the extents overfow.\n\nThis fixes CVE-2011-2203\n\nReported-by: Clement LECIGNE \u003cclement.lecigne@netasq.com\u003e\nSigned-off-by: Phillip Lougher \u003cplougher@redhat.com\u003e\nCc: Jeff Mahoney \u003cjeffm@suse.com\u003e\nCc: Christoph Hellwig \u003chch@lst.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "4a9410355406c31695eab9daeba694d7d9714e9b", "tree": "2b76a457a97c00825fec88d7d2047fb86a2e653d", "parents": [ "5356d94872502e77317f82e8fcae2a0b162af07c" ], "author": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Tue Sep 07 14:33:08 2010 +0000" }, "committer": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Tue Oct 12 17:36:11 2010 +0200" }, "message": "hfs: Convert tree_lock to mutex\n\ntree_lock is used as mutex so make it a mutex.\n\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nAcked-by: Christoph Hellwig \u003chch@lst.de\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nLKML-Reference: \u003c20100907125056.416332114@linutronix.de\u003e\n\n" }, { "commit": "5a0e3ad6af8660be21ca98a971cd00f331318c05", "tree": "5bfb7be11a03176a87296a43ac6647975c00a1d1", "parents": [ "ed391f4ebf8f701d3566423ce8f17e614cde9806" ], "author": { "name": "Tejun Heo", "email": "tj@kernel.org", "time": "Wed Mar 24 17:04:11 2010 +0900" }, "committer": { "name": "Tejun Heo", "email": "tj@kernel.org", "time": "Tue Mar 30 22:02:32 2010 +0900" }, "message": "include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h\n\npercpu.h is included by sched.h and module.h and thus ends up being\nincluded when building most .c files. percpu.h includes slab.h which\nin turn includes gfp.h making everything defined by the two files\nuniversally available and complicating inclusion dependencies.\n\npercpu.h -\u003e slab.h dependency is about to be removed. Prepare for\nthis change by updating users of gfp and slab facilities include those\nheaders directly instead of assuming availability. As this conversion\nneeds to touch large number of source files, the following script is\nused as the basis of conversion.\n\n http://userweb.kernel.org/~tj/misc/slabh-sweep.py\n\nThe script does the followings.\n\n* Scan files for gfp and slab usages and update includes such that\n only the necessary includes are there. ie. if only gfp is used,\n gfp.h, if slab is used, slab.h.\n\n* When the script inserts a new include, it looks at the include\n blocks and try to put the new include such that its order conforms\n to its surrounding. It\u0027s put in the include block which contains\n core kernel includes, in the same order that the rest are ordered -\n alphabetical, Christmas tree, rev-Xmas-tree or at the end if there\n doesn\u0027t seem to be any matching order.\n\n* If the script can\u0027t find a place to put a new include (mostly\n because the file doesn\u0027t have fitting include block), it prints out\n an error message indicating which .h file needs to be added to the\n file.\n\nThe conversion was done in the following steps.\n\n1. The initial automatic conversion of all .c files updated slightly\n over 4000 files, deleting around 700 includes and adding ~480 gfp.h\n and ~3000 slab.h inclusions. The script emitted errors for ~400\n files.\n\n2. Each error was manually checked. Some didn\u0027t need the inclusion,\n some needed manual addition while adding it to implementation .h or\n embedding .c file was more appropriate for others. This step added\n inclusions to around 150 files.\n\n3. The script was run again and the output was compared to the edits\n from #2 to make sure no file was left behind.\n\n4. Several build tests were done and a couple of problems were fixed.\n e.g. lib/decompress_*.c used malloc/free() wrappers around slab\n APIs requiring slab.h to be added manually.\n\n5. The script was run on all .h files but without automatically\n editing them as sprinkling gfp.h and slab.h inclusions around .h\n files could easily lead to inclusion dependency hell. Most gfp.h\n inclusion directives were ignored as stuff from gfp.h was usually\n wildly available and often used in preprocessor macros. Each\n slab.h inclusion directive was examined and added manually as\n necessary.\n\n6. percpu.h was updated not to include slab.h.\n\n7. Build test were done on the following configurations and failures\n were fixed. CONFIG_GCOV_KERNEL was turned off for all tests (as my\n distributed build env didn\u0027t work with gcov compiles) and a few\n more options had to be turned off depending on archs to make things\n build (like ipr on powerpc/64 which failed due to missing writeq).\n\n * x86 and x86_64 UP and SMP allmodconfig and a custom test config.\n * powerpc and powerpc64 SMP allmodconfig\n * sparc and sparc64 SMP allmodconfig\n * ia64 SMP allmodconfig\n * s390 SMP allmodconfig\n * alpha SMP allmodconfig\n * um on x86_64 SMP allmodconfig\n\n8. percpu.h modifications were reverted so that it could be applied as\n a separate patch and serve as bisection point.\n\nGiven the fact that I had only a couple of failures from tests on step\n6, I\u0027m fairly confident about the coverage of this conversion patch.\nIf there is a breakage, it\u0027s likely to be something in one of the arch\nheaders which should be easily discoverable easily on most builds of\nthe specific arch.\n\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nGuess-its-ok-by: Christoph Lameter \u003ccl@linux-foundation.org\u003e\nCc: Ingo Molnar \u003cmingo@redhat.com\u003e\nCc: Lee Schermerhorn \u003cLee.Schermerhorn@hp.com\u003e\n" }, { "commit": "47f365eb575735c6b2edf5d08e0d16d26a9c23bd", "tree": "3a6cbb4a7e6bbb9365c8092541a04d3ea1f77ce6", "parents": [ "cf6e693212263d33c5882e4653df89a2fca4c0c4" ], "author": { "name": "Jeff Mahoney", "email": "jeffm@suse.com", "time": "Mon Oct 26 16:49:56 2009 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Oct 29 07:39:29 2009 -0700" }, "message": "hfs: fix oops on mount with corrupted btree extent records\n\nA particular fsfuzzer run caused an hfs file system to crash on mount.\nThis is due to a corrupted MDB extent record causing a miscalculation of\nHFS_I(inode)-\u003efirst_blocks for the extent tree. If the extent records are\nzereod out, it won\u0027t trigger the first_blocks special case. Instead it\nfalls through to the extent code which we\u0027re still in the middle of\ninitializing.\n\nThis patch catches the 0 size extent records, reports the corruption, and\nfails the mount.\n\nReported-by: Ramon de Carvalho Valle \u003crcvalle@linux.vnet.ibm.com\u003e\nSigned-off-by: Jeff Mahoney \u003cjeffm@suse.com\u003e\nCc: Valdis Kletnieks \u003cValdis.Kletnieks@vt.edu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "39f8d472f280dee6503a364d1d911b9e20ce3ec9", "tree": "43c05018acca3e30234b914e4bf80439915a2807", "parents": [ "3084b72de73a6f8af0f16989ffb348068bd066d4" ], "author": { "name": "Matthias Kaehlcke", "email": "matthias@kaehlcke.net", "time": "Fri Jul 25 01:46:35 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 25 10:53:33 2008 -0700" }, "message": "hfs: convert extents_lock in a mutex\n\nApple Macintosh file system: The semaphore extens_lock is used as a mutex.\nConvert it to the mutex API\n\nSigned-off-by: Matthias Kaehlcke \u003cmatthias@kaehlcke.net\u003e\nCc: Roman Zippel \u003czippel@linux-m68k.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "3e5a5097303eedb4ffae2719843eb064221b1db4", "tree": "3b1de7bb20e5f344b4c96a8c5a4830823c1b7b5d", "parents": [ "f735295b14ae073a8302d7b1da894bc597724557" ], "author": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Apr 30 00:54:53 2008 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Apr 30 08:29:52 2008 -0700" }, "message": "hfs: fix warning with 64k PAGE_SIZE\n\nfs/hfs/btree.c: In function \u0027hfs_bmap_alloc\u0027:\nfs/hfs/btree.c:263: warning: comparison is always false due to limited range of data type\n\nThe patch makes the warning go away, but the code might actually be buggy?\n\nCc: Roman Zippel \u003czippel@linux-m68k.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "55581d018ed3493d226e7a4d645d9c8a5af6c36b", "tree": "d687d90390073aeb0bda273b7b9f051a36f5d892", "parents": [ "7c28cbaed6811260efc0134b984b924cd0ed46f5" ], "author": { "name": "Eric Sandeen", "email": "sandeen@redhat.com", "time": "Wed Feb 06 01:37:10 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Feb 06 10:41:05 2008 -0800" }, "message": "address hfs on-disk corruption robustness review comments\n\nAddress Roman\u0027s review comments for the previously sent on-disk\ncorruption hfs robustness patch.\n\n- use 0 as a failure value, rather than making a new macro HFS_BAD_KEYLEN,\n and use a switch statement instead of if\u0027s.\n\n- Add new fail: target to __hfs_brec_find to skip assignments using bad\n values when exiting with a failure.\n\n[akpm@linux-foundation.org: coding-style fixes]\nSigned-off-by: Eric Sandeen \u003csandeen@redhat.com\u003e\nCc: Roman Zippel \u003czippel@linux-m68k.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "46a39c1cd5d2f804b27e9a4be3fb1b510dda9570", "tree": "1f085f3303baa0f47feeb3b36d54e169bc5e210e", "parents": [ "6915719b36a97d28fab576c6fa2a20364b435fe6" ], "author": { "name": "Eric Sandeen", "email": "sandeen@redhat.com", "time": "Thu Jan 17 15:21:09 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Thu Jan 17 15:38:58 2008 -0800" }, "message": "hfs: fix coverity-found null deref\n\nFix potential null deref introduced by commit\ncf0594625083111ae522496dc1c256f7476939c2\nhttp://bugzilla.kernel.org/show_bug.cgi?id\u003d9748\n\nSigned-off-by: Eric Sandeen \u003csandeen@redhat.com\u003e\nCc: Roman Zippel \u003czippel@linux-m68k.org\u003e\nReported-by: Adrian Bunk \u003cbunk@stusta.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "cf0594625083111ae522496dc1c256f7476939c2", "tree": "f83641f74c89fa4fb17adb2f216b074f2352639c", "parents": [ "467bc461d2845f6a04b124bca1ae6ecc554e1ee5" ], "author": { "name": "Eric Sandeen", "email": "sandeen@redhat.com", "time": "Tue Jan 08 15:33:20 2008 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Tue Jan 08 16:10:36 2008 -0800" }, "message": "hfs: handle more on-disk corruptions without oopsing\n\nhfs seems prone to bad things when it encounters on disk corruption. Many\nvalues are read from disk, and used as lengths to memcpy, as an example.\nThis patch fixes up several of these problematic cases.\n\no sanity check the on-disk maximum key lengths on mount\n (these are set to a defined value at mkfs time and shouldn\u0027t differ)\no check on-disk node keylens against the maximum key length for each tree\no fix hfs_btree_open so that going out via free_tree: doesn\u0027t wind\n up in hfs_releasepage, which wants to follow the very pointer\n we were trying to set up:\n\tHFS_SB(sb)-\u003ecat_tree \u003d hfs_btree_open()\n\t\t...\n\t\tfailure gets to hfs_releasepage and tries\n\t\tto follow HFS_SB(sb)-\u003ecat_tree\n\nTested with the fsfuzzer; it survives more than it used to.\n\nSigned-off-by: Eric Sandeen \u003csandeen@redhat.com\u003e\nCc: Roman Zippel \u003czippel@linux-m68k.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "e1b5c1d3da05c91129120d045dfcdfc7761f44f1", "tree": "0d29f32fbad55a9cc90b05ef1974103b6afe4ea9", "parents": [ "e7d709c096487078652a1384d7a2d0e4459e18b6" ], "author": { "name": "Vignesh Babu BM", "email": "vignesh.babu@wipro.com", "time": "Tue May 08 00:24:30 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Tue May 08 11:14:59 2007 -0700" }, "message": "is_power_of_2 in fs/hfs\n\nReplace (n \u0026 (n-1)) in the context of power of 2 checks with is_power_of_2\n\nSigned-off-by: vignesh babu \u003cvignesh.babu@wipro.com\u003e\nCc: Roman Zippel \u003czippel@linux-m68k.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "f8314dc60ccba7e41f425048c4160dc7f63377d5", "tree": "4e361a6e93dc7f64da0244e5a0dfef1fface0ddb", "parents": [ "32c2d2bc4bed61323f14f2a7d69ccbd567253d8a" ], "author": { "name": "Panagiotis Issaris", "email": "takis@issaris.org", "time": "Wed Sep 27 01:49:37 2006 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Wed Sep 27 08:26:10 2006 -0700" }, "message": "[PATCH] fs: Conversions from kmalloc+memset to k(z|c)alloc\n\nConversions from kmalloc+memset to kzalloc.\n\nSigned-off-by: Panagiotis Issaris \u003ctakis@issaris.org\u003e\nJffs2-bit-acked-by: David Woodhouse \u003cdwmw2@infradead.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "090d2b185d8680fc26a2eaf4245d4171dcf4baf1", "tree": "67e604e3cd1bad3cfd034bced19a0fbff6a80c30", "parents": [ "c330dda908b5a46469a997eea90b66f2f9f02b34" ], "author": { "name": "Pekka Enberg", "email": "penberg@cs.helsinki.fi", "time": "Fri Jun 23 02:05:08 2006 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Fri Jun 23 07:43:02 2006 -0700" }, "message": "[PATCH] read_mapping_page for address space\n\nAdd read_mapping_page() which is used for callers that pass\nmapping-\u003ea_ops-\u003ereadpage as the filler for read_cache_page. This removes\nsome duplication from filesystem code.\n\nSigned-off-by: Pekka Enberg \u003cpenberg@cs.helsinki.fi\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "4d4ef9abe34a472fbfc9ab75cfde0d58bc342c44", "tree": "77bb1b3be39cb94c7ee6dc71a740a74ea756527f", "parents": [ "28133c7b2b9bbdf8a8765a319e818c1652f38c1f" ], "author": { "name": "Eric Sesterhenn", "email": "snakebyte@gmx.de", "time": "Sun Mar 26 18:26:51 2006 +0200" }, "committer": { "name": "Adrian Bunk", "email": "bunk@stusta.de", "time": "Sun Mar 26 18:26:51 2006 +0200" }, "message": "BUG_ON() Conversion in fs/hfs/\n\nthis changes if() BUG(); constructs to BUG_ON() which is\ncleaner, contains unlikely() and can better optimized away.\n\nSigned-off-by: Eric Sesterhenn \u003csnakebyte@gmx.de\u003e\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\n" }, { "commit": "7cf3cc3036cb7b1147350bf7c3f1ab98c160eb7b", "tree": "16bf33c636dec614c47959edfab9c2ef724ac93d", "parents": [ "634725a92938b0f282b17cec0b007dca77adebd2" ], "author": { "name": "Roman Zippel", "email": "zippel@linux-m68k.org", "time": "Wed Jan 18 17:43:07 2006 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Wed Jan 18 19:20:23 2006 -0800" }, "message": "[PATCH] hfs: cleanup HFS prints\n\nAdd the log level and a \"hfs: \" prefix to all kernel prints.\n\nSigned-off-by: Roman Zippel \u003czippel@linux-m68k.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "tree": "0bba044c4ce775e45a88a51686b5d9f90697ea9d", "parents": [], "author": { "name": "Linus Torvalds", "email": "torvalds@ppc970.osdl.org", "time": "Sat Apr 16 15:20:36 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@ppc970.osdl.org", "time": "Sat Apr 16 15:20:36 2005 -0700" }, "message": "Linux-2.6.12-rc2\n\nInitial git repository build. I\u0027m not bothering with the full history,\neven though we have it. We can create a separate \"historical\" git\narchive of that later if we want to, and in the meantime it\u0027s about\n3.2GB when imported into git - space that would just make the early\ngit days unnecessarily complicated, when we don\u0027t have a lot of good\ninfrastructure for it.\n\nLet it rip!\n" } ] }