ext4: fix potential race between s_group_info online resizing and access
authorSuraj Jitindar Singh <surajjs@amazon.com>
Wed, 19 Feb 2020 03:08:50 +0000 (19:08 -0800)
committerTheodore Ts'o <tytso@mit.edu>
Fri, 21 Feb 2020 05:38:12 +0000 (00:38 -0500)
commitdf3da4ea5a0fc5d115c90d5aa6caa4dd433750a7
treef9ff3e4480025acaef8bec07cbf806a7cd6dfb2b
parent1d0c3924a92e69bfa91163bda83c12a994b4d106
ext4: fix potential race between s_group_info online resizing and access

During an online resize an array of pointers to s_group_info gets replaced
so it can get enlarged. If there is a concurrent access to the array in
ext4_get_group_info() and this memory has been reused then this can lead to
an invalid memory access.

Link: https://bugzilla.kernel.org/show_bug.cgi?id=206443
Link: https://lore.kernel.org/r/20200221053458.730016-3-tytso@mit.edu
Signed-off-by: Suraj Jitindar Singh <surajjs@amazon.com>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Reviewed-by: Balbir Singh <sblbir@amazon.com>
Cc: stable@kernel.org
fs/ext4/ext4.h
fs/ext4/mballoc.c