]> git.baikalelectronics.ru Git - kernel.git/commit
jffs2: fix use-after-free on symlink traversal
authorAl Viro <viro@zeniv.linux.org.uk>
Tue, 26 Mar 2019 01:39:50 +0000 (01:39 +0000)
committerAl Viro <viro@zeniv.linux.org.uk>
Mon, 1 Apr 2019 04:31:02 +0000 (00:31 -0400)
commit5a97a9958b6e20518d8363c3252afdc5fe97f1d7
treed0c9167b762a5837ac3030d2f1e869454a4c4ac6
parent805099b2fb57eba3d69bc38aeb447dfe76b0ebb9
jffs2: fix use-after-free on symlink traversal

free the symlink body after the same RCU delay we have for freeing the
struct inode itself, so that traversal during RCU pathwalk wouldn't step
into freed memory.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
fs/jffs2/readinode.c
fs/jffs2/super.c