| commit | 28a625cbc2a14f17b83e47ef907b2658576a32aa | |
| author | Miklos Szeredi <mszeredi@suse.cz> | |
| Wed, 22 Jan 2014 18:36:57 +0000 (22 19:36 +0100) | ||
| committer | Miklos Szeredi <mszeredi@suse.cz> | |
| Wed, 22 Jan 2014 18:36:57 +0000 (22 19:36 +0100) | ||
| tree | 58d461b91f25a6499bd6404cd79faa4f9c185ff0 | treesnapshot (tar.gz zip) |
| parent | d8ec26d7f8287f5788a494f56e8814210f0e64be | commitdiff |
fuse: fix pipe_buf_operations
Having this struct in module memory could Oops when if the module is
unloaded while the buffer still persists in a pipe.
Since sock_pipe_buf_ops is essentially the same as fuse_dev_pipe_buf_steal
merge them into nosteal_pipe_buf_ops (this is the same as
default_pipe_buf_ops except stealing the page from the buffer is not
allowed).
Reported-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
Cc: stable@vger.kernel.org
Having this struct in module memory could Oops when if the module is
unloaded while the buffer still persists in a pipe.
Since sock_pipe_buf_ops is essentially the same as fuse_dev_pipe_buf_steal
merge them into nosteal_pipe_buf_ops (this is the same as
default_pipe_buf_ops except stealing the page from the buffer is not
allowed).
Reported-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
Cc: stable@vger.kernel.org
| fs/fuse/dev.c | diffblobblamehistory | |
| fs/splice.c | diffblobblamehistory | |
| include/linux/pipe_fs_i.h | diffblobblamehistory | |
| net/core/skbuff.c | diffblobblamehistory |