Skip to content

Commit

Permalink
init/do_mounts_rd.c: fix NULL pointer dereference while loading initr…
Browse files Browse the repository at this point in the history
…amfs

Make menuconfig allows one to choose compression format of an initial
ramdisk image.  But this choice does not result in duly compressed initial
ramdisk image.  Because - $ make install - does not pass on the selected
compression choice to the dracut(8) tool, which creates the initramfs
file.  dracut(8) generates the image with the default compression, ie.
gzip(1).

If a user chose any other compression instead of gzip(1), it leads to a
crash due to NULL pointer dereference in crd_load(), caused by a NULL
function pointer returned by the 'decompress_method()' routine.  Because
the initramfs image is gzip(1) compressed, whereas the kernel knows only
to decompress the chosen format and not gzip(1).

This patch replaces the crash by an explicit panic() call with an
appropriate error message. This shall prevent the kernel from
eventually panicking in: init/do_mounts.c: mount_block_root() with
  -> panic("VFS: Unable to mount root fs on %s", b);

[[email protected]: mention that the problem is with the ramdisk, don't print known-to-be-NULL value]
Signed-off-by: P J P <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
  • Loading branch information
P J P authored and torvalds committed Nov 13, 2013
1 parent 6532154 commit df3ef3a
Showing 1 changed file with 7 additions and 0 deletions.
7 changes: 7 additions & 0 deletions init/do_mounts_rd.c
Original file line number Diff line number Diff line change
Expand Up @@ -342,6 +342,13 @@ static int __init crd_load(int in_fd, int out_fd, decompress_fn deco)
int result;
crd_infd = in_fd;
crd_outfd = out_fd;

if (!deco) {
pr_emerg("Invalid ramdisk decompression routine. "
"Select appropriate config option.\n");
panic("Could not decompress initial ramdisk image.");
}

result = deco(NULL, 0, compr_fill, compr_flush, NULL, NULL, error);
if (decompress_error)
result = 1;
Expand Down

0 comments on commit df3ef3a

Please sign in to comment.