Anton Blanchard 0a93ea2e89 RxRPC: Allocate tokens with kzalloc to avoid oops in rxrpc_destroy ... With slab poisoning enabled, I see the following oops: Unable to handle kernel paging request for data at address 0x6b6b6b6b6b6b6b73 ... NIP [c0000000006bc61c] .rxrpc_destroy+0x44/0x104 LR [c0000000006bc618] .rxrpc_destroy+0x40/0x104 Call Trace: [c0000000feb2bc00] [c0000000006bc618] .rxrpc_destroy+0x40/0x104 (unreliable) [c0000000feb2bc90] [c000000000349b2c] .key_cleanup+0x1a8/0x20c [c0000000feb2bd40] [c0000000000a2920] .process_one_work+0x2f4/0x4d0 [c0000000feb2be00] [c0000000000a2d50] .worker_thread+0x254/0x468 [c0000000feb2bec0] [c0000000000a868c] .kthread+0xbc/0xc8 [c0000000feb2bf90] [c000000000020e00] .kernel_thread+0x54/0x70 We aren't initialising token->next, but the code in destroy_context relies on the list being NULL terminated. Use kzalloc to zero out all the fields. Signed-off-by: Anton Blanchard <anton@samba.org> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2011-02-25 11:12:37 -08:00
..
9p
802
8021q
appletalk
atm
ax25	net: ax25: fix information leak to userland harder	2011-01-12 00:34:49 -08:00
batman-adv	batman-adv: Linearize fragment packets before merge	2011-02-08 00:54:31 +01:00
bluetooth	Bluetooth: Release BTM while sleeping to avoid deadlock	2011-02-16 15:54:11 -03:00
bridge	bridge: Use IPv6 link-local address for multicast listener queries	2011-02-22 10:07:29 -08:00
caif	net/caif: Fix dangling list pointer in freed object on error.	2011-02-08 14:31:31 -08:00
can	can: test size of struct sockaddr in sendmsg	2011-01-15 20:56:42 -08:00
ceph	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client	2011-02-21 15:01:38 -08:00
core	net: deinit automatic LIST_HEAD	2011-02-18 11:49:36 -08:00
dcb	Don't potentially dereference NULL in net/dcb/dcbnl.c:dcbnl_getapp()	2011-02-13 11:21:14 -08:00
dccp	Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial	2011-01-13 10:05:56 -08:00
decnet	Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial	2011-01-13 10:05:56 -08:00
dns_resolver
dsa	module: fix missing semicolons in MODULE macro usage	2011-01-24 14:32:54 +10:30
econet	econet: remove compiler warnings	2011-01-27 14:15:54 -08:00
ethernet	eth: fix new kernel-doc warning	2011-01-12 19:00:40 -08:00
ieee802154
ipv4	tcp: undo_retrans counter fixes	2011-02-21 11:31:18 -08:00
ipv6	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-2.6	2011-02-19 16:42:37 -08:00
ipx
irda
iucv
key
l2tp
lapb
llc
mac80211	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6	2011-02-22 11:53:05 -08:00
netfilter	netfilter: tproxy: do not assign timewait sockets to skb->sk	2011-02-17 11:32:38 +01:00
netlabel
netlink	Revert "netlink: test for all flags of the NLM_F_DUMP composite"	2011-01-19 13:34:20 -08:00
netrom
packet
phonet
rds
rfkill	kconfig: rename CONFIG_EMBEDDED to CONFIG_EXPERT	2011-01-20 17:02:05 -08:00
rose
rxrpc	RxRPC: Allocate tokens with kzalloc to avoid oops in rxrpc_destroy	2011-02-25 11:12:37 -08:00
sched	net: Fix more stale on-stack list_head objects.	2011-02-20 11:49:45 -08:00
sctp	sctp: fix reporting of unknown parameters	2011-02-19 19:06:55 -08:00
sunrpc	NFS do not find client in NFSv4 pg_authenticate	2011-01-25 15:26:51 -05:00
tipc
unix
wanrouter
wimax
wireless	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6	2011-02-22 11:53:05 -08:00
x25	x25: Do not reference freed memory.	2011-02-09 22:36:13 -08:00
xfrm	xfrm: avoid possible oopse in xfrm_alloc_dst	2011-02-10 23:08:33 -08:00
compat.c
Kconfig	Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial	2011-01-13 10:05:56 -08:00
Makefile
nonet.c
socket.c	pass default dentry_operations to mount_pseudo()	2011-01-12 20:03:43 -05:00
sysctl_net.c
TUNABLE