projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4525c87) | patch
gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free
authorBob Peterson <rpeterso@redhat.com>
Tue, 27 Oct 2020 15:10:01 +0000 (10:10 -0500)
committerAndreas Gruenbacher <agruenba@redhat.com>
Thu, 29 Oct 2020 21:16:36 +0000 (22:16 +0100)
commitd0f17d3883f1e3f085d38572c2ea8edbd5150172
tree97a986f49a518518cbf08e4e2907f743b088c727tree | snapshot
parent4525c8781ec0701ce824e8bd379ae1b129e26568commit | diff
gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free

Function gfs2_clear_rgrpd calls kfree(rgd->rd_bits) before calling
return_all_reservations, but return_all_reservations still dereferences
rgd->rd_bits in __rs_deltree.  Fix that by moving the call to kfree below the
call to return_all_reservations.

Signed-off-by: Bob Peterson <rpeterso@redhat.com>
Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
fs/gfs2/rgrp.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git