[PATCH] Fix potential OOPs in blkdev_open()

blkdev_open() calls bc_acquire() to get a struct block_device. Since bc_acquire() may return NULL when system is out of memory an appropriate check is required. Signed-off-by: Pavel Emelianov <xemul@openvz.org> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org>

[PATCH] Fix potential OOPs in blkdev_open()
blkdev_open() calls bc_acquire() to get a struct block_device. Since bc_acquire() may return NULL when system is out of memory an appropriate check is required. Signed-off-by: Pavel Emelianov <xemul@openvz.org> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Pavel Emelianov · Linus Torvalds
1 parent f2d0aa5bf8
Showing 1 changed file with 2 additions and 0 deletions Side-by-side Diff
fs/block_dev.c
@@ -1131,6 +1131,8 @@
 	filp->f_flags |= O_LARGEFILE;
  
 	bdev = bd_acquire(inode);
+	if (bdev == NULL)
+		return -ENOMEM;
  
 	res = do_open(bdev, filp, BD_MUTEX_NORMAL);
 	if (res)
...	...	@@ -1131,6 +1131,8 @@
1131	1131	filp->f_flags \|= O_LARGEFILE;
1132	1132
1133	1133	bdev = bd_acquire(inode);
	1134	+ if (bdev == NULL)
	1135	+ return -ENOMEM;
1134	1136
1135	1137	res = do_open(bdev, filp, BD_MUTEX_NORMAL);
1136	1138	if (res)