linux/Documentation
Anton Altaparmakov af5eb745ef NTFS: Fix invalid pointer dereference in ntfs_mft_record_alloc().
In ntfs_mft_record_alloc() when mapping the new extent mft record with
map_extent_mft_record() we overwrite @m with the return value and on
error, we then try to use the old @m but that is no longer there as @m
now contains an error code instead so we crash when dereferencing the
error code as if it were a pointer.

The simple fix is to use a temporary variable to store the return value
thus preserving the original @m for later use.  This is a backport from
the commercial Tuxera-NTFS driver and is well tested...

Thanks go to Julia Lawall for pointing this out (whilst I had fixed it
in the commercial driver I had failed to fix it in the Linux kernel).

Signed-off-by: Anton Altaparmakov <anton@tuxera.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2011-01-31 12:58:11 +10:00
..
2010-02-24 13:51:32 +01:00
2008-02-14 00:16:13 -05:00
2008-10-16 11:21:30 -07:00
2011-01-13 20:00:02 +00:00
2011-01-06 18:10:09 +09:00
2008-02-03 15:54:28 +02:00
2011-01-18 12:22:54 -08:00
2011-01-13 08:03:21 -08:00
2008-01-11 18:22:30 -06:00
2010-07-11 22:17:45 +02:00
2011-01-13 08:03:18 -08:00
2011-01-13 08:03:25 -08:00
2010-04-08 11:34:34 +02:00
2008-12-03 16:09:53 -07:00
2008-07-25 10:53:30 -07:00
2009-10-15 07:25:20 -06:00
2008-03-24 19:22:19 -07:00
2009-07-01 22:36:22 +02:00
2009-04-27 12:00:27 -07:00
2009-04-27 12:00:27 -07:00
2008-11-12 17:17:17 -08:00
2010-03-10 17:09:33 -05:00
2006-06-27 17:32:47 -07:00
2010-07-19 10:56:54 +02:00
2010-03-16 11:47:56 +01:00
2010-08-02 15:35:10 +10:00