From: "Yan, Zheng" <[email protected]> The bug can cause NULL pointer dereference in write_partial_msg_pages
Signed-off-by: Zheng Yan <[email protected]> --- net/ceph/messenger.c | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/net/ceph/messenger.c b/net/ceph/messenger.c index 1a80907..785b953 100644 --- a/net/ceph/messenger.c +++ b/net/ceph/messenger.c @@ -598,6 +598,7 @@ static void prepare_write_message(struct ceph_connection *con) le32_to_cpu(con->out_msg->footer.front_crc), le32_to_cpu(con->out_msg->footer.middle_crc)); + m->bio_iter = NULL; /* is there a data payload? */ if (le32_to_cpu(m->hdr.data_len) > 0) { /* initialize page iterator */ -- 1.7.7.6 -- To unsubscribe from this list: send the line "unsubscribe ceph-devel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
