From: Daniel Rosenberg <drosen@google.com>
Date: Mon, 29 May 2017 23:38:16 +0000 (-0700)
Subject: ANDROID: mnt: Fix next_descendent
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=572cdb99e9a32bda15aa07f0d9de7e27aad04825;p=GitHub%2FLineageOS%2Fandroid_kernel_motorola_exynos9610.git

ANDROID: mnt: Fix next_descendent

next_descendent did not properly handle the case
where the initial mount had no slaves. In this case,
we would look for the next slave, but since don't
have a master, the check for wrapping around to the
start of the list will always fail. Instead, we check
for this case, and ensure that we end the iteration
when we come back to the root.

Signed-off-by: Daniel Rosenberg <drosen@google.com>
Bug: 62094374
Change-Id: I43dfcee041aa3730cb4b9a1161418974ef84812e
---

diff --git a/fs/pnode.c b/fs/pnode.c
index 386884dd6d97..56f9a28a688b 100644
--- a/fs/pnode.c
+++ b/fs/pnode.c
@@ -616,9 +616,14 @@ static struct mount *next_descendent(struct mount *root, struct mount *cur)
 	if (!IS_MNT_NEW(cur) && !list_empty(&cur->mnt_slave_list))
 		return first_slave(cur);
 	do {
-		if (cur->mnt_slave.next != &cur->mnt_master->mnt_slave_list)
-			return next_slave(cur);
-		cur = cur->mnt_master;
+		struct mount *master = cur->mnt_master;
+
+		if (!master || cur->mnt_slave.next != &master->mnt_slave_list) {
+			struct mount *next = next_slave(cur);
+
+			return (next == root) ? NULL : next;
+		}
+		cur = master;
 	} while (cur != root);
 	return NULL;
 }