jbd2: don't mark block as modified if the handle is out of credits
authorTheodore Ts'o <tytso@mit.edu>
Sun, 17 Jun 2018 00:21:45 +0000 (20:21 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 11 Jul 2018 14:29:16 +0000 (16:29 +0200)
commit0321e68838d7ba2528b367b879b2fcf9d96a2099
treed4b5b49a23e4721e6cf1e89b2fd3f6755895bd14
parentb541f470d4bda051356e8169d6b309bdd37437db
jbd2: don't mark block as modified if the handle is out of credits

commit e09463f220ca9a1a1ecfda84fcda658f99a1f12a upstream.

Do not set the b_modified flag in block's journal head should not
until after we're sure that jbd2_journal_dirty_metadat() will not
abort with an error due to there not being enough space reserved in
the jbd2 handle.

Otherwise, future attempts to modify the buffer may lead a large
number of spurious errors and warnings.

This addresses CVE-2018-10883.

https://bugzilla.kernel.org/show_bug.cgi?id=200071

Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Cc: stable@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/jbd2/transaction.c