Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit bf77ae4c authored by NeilBrown's avatar NeilBrown Committed by Jeff Layton
Browse files

locks: fix error in locks_move_blocks() 



After moving all requests from
   fl->fl_blocked_requests
to
   new->fl_blocked_requests

it is nonsensical to do anything to all the remaining elements, there
aren't any.  This should do something to all the requests that have been
moved. For simplicity, it does it to all requests in the target list.

Setting "f->fl_blocker = new" to all members of new->fl_blocked_requests
is "obviously correct" as it preserves the invariant of the linkage
among requests.

Reported-by: default avatar <syzbot+239d99847eb49ecb3899@syzkaller.appspotmail.com>
Fixes: 5946c431 ("fs/locks: allow a lock request to block other requests.")
Signed-off-by: default avatarNeilBrown <neilb@suse.com>
Signed-off-by: default avatarJeff Layton <jlayton@kernel.org>
parent 8e143b90

fs/locks.c

+1 −1
Original line number Diff line number Diff line
@@ -453,7 +453,7 @@ static void locks_move_blocks(struct file_lock *new, struct file_lock *fl) 
		return;

	spin_lock(&blocked_lock_lock);

	list_splice_init(&fl->fl_blocked_requests, &new->fl_blocked_requests);

	list_for_each_entry(f, &fl->fl_blocked_requests, fl_blocked_member)

	list_for_each_entry(f, &new->fl_blocked_requests, fl_blocked_member)

		f->fl_blocker = new;

	spin_unlock(&blocked_lock_lock);

}