]> git.baikalelectronics.ru Git - kernel.git/commit
btrfs: Handle uninitialised inode eviction
authorNikolay Borisov <kernel@kyup.com>
Wed, 29 Jun 2016 06:46:41 +0000 (09:46 +0300)
committerDavid Sterba <dsterba@suse.com>
Tue, 26 Jul 2016 11:52:25 +0000 (13:52 +0200)
commitb9ed9c48c1355072b74d2a826c1f67aca410421f
tree1bdd8f5dd630aa97d03bd17cda4049d84335eebc
parent95b6e48357ebcecb4db498bf18bc73230a7a187b
btrfs: Handle uninitialised inode eviction

The code flow in btrfs_new_inode allows for btrfs_evict_inode to be
called with not fully initialised inode (e.g. ->root member not
being set). This can happen when btrfs_set_inode_index in
btrfs_new_inode fails, which in turn would call iput for the newly
allocated inode. This in turn leads to vfs calling into btrfs_evict_inode.
This leads to null pointer dereference. To handle this situation check whether
the passed inode has root set and just free it in case it doesn't.

Signed-off-by: Nikolay Borisov <kernel@kyup.com>
Reviewed-by: Josef Bacik <jbacik@fb.com>
Signed-off-by: David Sterba <dsterba@suse.com>
fs/btrfs/inode.c