From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <stable-owner@vger.kernel.org>
Received: from mail.kernel.org ([198.145.29.99]:37304 "EHLO mail.kernel.org"
        rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP
        id S1728508AbeJSBE7 (ORCPT <rfc822;stable@vger.kernel.org>);
        Thu, 18 Oct 2018 21:04:59 -0400
Date: Thu, 18 Oct 2018 19:03:04 +0200
From: Greg KH <gregkh@linuxfoundation.org>
To: Chenbo Feng <fengc@google.com>
Cc: stable@vger.kernel.org, kernel-team@android.com,
        Theodore Ts'o <tytso@mit.edu>, stable@kernel.org
Subject: Re: [4.4.y v2] ext4: avoid running out of journal credits when
 appending to an inline file
Message-ID: <20181018170304.GH11159@kroah.com>
References: <20181011185142.104586-1-fengc@google.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20181011185142.104586-1-fengc@google.com>
Sender: stable-owner@vger.kernel.org
List-ID: <stable.vger.kernel.org>

On Thu, Oct 11, 2018 at 11:51:41AM -0700, Chenbo Feng wrote:
> From: Theodore Ts'o <tytso@mit.edu>
> 
> commit 8bc1379b82b8e809eef77a9fedbb75c6c297be19 upstream.
> 
> Use a separate journal transaction if it turns out that we need to
> convert an inline file to use an data block.  Otherwise we could end
> up failing due to not having journal credits.
> 
> This addresses CVE-2018-10883.
> 
> https://bugzilla.kernel.org/show_bug.cgi?id=200071
> 
> Change-Id: Ifbe92e379f7a25fb252a2584356ccb91f902ea8f
> Signed-off-by: Theodore Ts'o <tytso@mit.edu>
> Cc: stable@kernel.org
> [fengc@google.com: 4.4 and 4.9 backport: adjust context]
> Signed-off-by: Chenbo Feng <fengc@google.com>

This also does not apply to the 4.4.y tree :(