Jun'ichi Nomura fe316bf2d5 block: Fix NULL pointer dereference in sd_revalidate_disk ...

Since 2.6.39 (1196f8b), when a driver returns -ENOMEDIUM for open(),
__blkdev_get() calls rescan_partitions() to remove
in-kernel partition structures and raise KOBJ_CHANGE uevent.

However it ends up calling driver's revalidate_disk without open
and could cause oops.

In the case of SCSI:

  process A                  process B
  ----------------------------------------------
  sys_open
    __blkdev_get
      sd_open
        returns -ENOMEDIUM
                             scsi_remove_device
                               <scsi_device torn down>
      rescan_partitions
        sd_revalidate_disk
          <oops>
Oopses are reported here:
http://marc.info/?l=linux-scsi&m=132388619710052

This patch separates the partition invalidation from rescan_partitions()
and use it for -ENOMEDIUM case.

Reported-by: Huajun Li <huajun.li.lee@gmail.com>
Signed-off-by: Jun'ichi Nomura <j-nomura@ce.jp.nec.com>
Acked-by: Tejun Heo <tj@kernel.org>
Cc: stable@kernel.org
Signed-off-by: Jens Axboe <axboe@kernel.dk>

2012-03-02 10:38:33 +01:00

..

partitions

separate partition format handling from generic code

2012-01-03 22:54:06 -05:00

blk-cgroup.c

block: strip out locking optimization in put_io_context()

2012-02-07 07:51:30 +01:00

blk-cgroup.h

block: fix a typo in the blk-cgroup.h file

2011-10-24 16:08:38 +02:00

blk-core.c

block: don't call elevator callbacks for plug merges

2012-02-08 09:19:42 +01:00

blk-exec.c

block: add missing blk_queue_dead() checks

2011-12-14 00:33:37 +01:00

blk-flush.c

blk-flush: move the queue kick into

2011-10-24 16:24:31 +02:00

blk-integrity.c

block: add export.h to files using EXPORT_SYMBOL/THIS_MODULE macros

2011-10-31 19:31:12 -04:00

blk-ioc.c

block: exit_io_context() should call elevator_exit_icq_fn()

2012-02-15 09:45:53 +01:00

blk-iopoll.c

tree-wide: fix assorted typos all over the place

2009-12-04 15:39:55 +01:00

blk-lib.c

block: fix patch import error in max_discard_sectors check

2011-07-23 20:34:59 +02:00

blk-map.c

block: re-use existing 'reading' variable instead of checking direction again

2011-12-21 15:27:24 +01:00

blk-merge.c

block: separate out blk_rq_merge_ok() and blk_try_merge() from elevator functions

2012-02-08 09:19:38 +01:00

blk-settings.c

block: Introduce blk_set_stacking_limits function

2012-01-11 16:27:11 +01:00

blk-softirq.c

block: Don't check QUEUE_FLAG_SAME_COMP in __blk_complete_request

2011-09-14 09:31:01 +02:00

blk-sysfs.c

block, cfq: move io_cq exit/release to blk-ioc.c

2011-12-14 00:33:42 +01:00

blk-tag.c

block: fix blk_queue_end_tag()

2011-12-29 09:16:28 +01:00

blk-throttle.c

block: add blk_queue_dead()

2011-12-14 00:33:37 +01:00

blk-timeout.c

fault-injection: add ability to export fault_attr in arbitrary directory

2011-08-03 14:25:20 -10:00

blk.h

block: separate out blk_rq_merge_ok() and blk_try_merge() from elevator functions

2012-02-08 09:19:38 +01:00

bsg-lib.c

block: Change module.h -> export.h in bsg-lib.c

2011-10-31 19:31:13 -04:00

bsg.c

bsg: fix sysfs link remove warning

2012-02-08 20:02:03 +01:00

cfq-iosched.c

block: replace icq->changed with icq->flags

2012-02-15 09:45:49 +01:00

cfq.h

blk-cgroup: Add unaccounted time to timeslice_used.

2011-03-12 16:54:00 +01:00

compat_ioctl.c

block: Add BLKROTATIONAL ioctl

2012-01-11 16:29:31 +01:00

deadline-iosched.c

block, cfq: move icq cache management to block core

2011-12-14 00:33:42 +01:00

elevator.c

block: separate out blk_rq_merge_ok() and blk_try_merge() from elevator functions

2012-02-08 09:19:38 +01:00

genhd.c

Merge branch 'for-3.3/core' of git://git.kernel.dk/linux-block

2012-01-15 12:24:45 -08:00

ioctl.c

Merge branch 'for-3.3/core' of git://git.kernel.dk/linux-block

2012-01-15 12:24:45 -08:00

Kconfig

move fs/partitions to block/

2012-01-03 22:54:06 -05:00

Kconfig.iosched

blk-cgroup: config options re-arrangement

2010-04-26 19:27:56 +02:00

Makefile

separate partition format handling from generic code

2012-01-03 22:54:06 -05:00

noop-iosched.c

block, cfq: move icq cache management to block core

2011-12-14 00:33:42 +01:00

partition-generic.c

block: Fix NULL pointer dereference in sd_revalidate_disk

2012-03-02 10:38:33 +01:00

scsi_ioctl.c

block: fail SCSI passthrough ioctls on partition devices

2012-01-14 15:07:24 -08:00