android_kernel_samsung_a7y1.../fs/ceph
Al Viro 66b2b0b515 ceph: fix use-after-free on symlink traversal
[ Upstream commit daf5cc27eed99afdea8d96e71b89ba41f5406ef6 ]

free the symlink body after the same RCU delay we have for freeing the
struct inode itself, so that traversal during RCU pathwalk wouldn't step
into freed memory.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Reviewed-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Sasha Levin (Microsoft) <sashal@kernel.org>
2020-04-06 16:41:38 +02:00
..
acl.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
addr.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
cache.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
cache.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
caps.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ceph_frag.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
debugfs.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
dir.c ceph: ensure d_name stability in ceph_dentry_hash() 2020-04-06 16:38:45 +02:00
export.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
file.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
inode.c ceph: fix use-after-free on symlink traversal 2020-04-06 16:41:38 +02:00
ioctl.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ioctl.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Kconfig A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
locks.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Makefile A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
mds_client.c ceph: fix ci->i_head_snapc leak 2020-04-06 16:38:46 +02:00
mds_client.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
mdsmap.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
snap.c ceph: fix ci->i_head_snapc leak 2020-04-06 16:38:46 +02:00
strings.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
super.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
super.h A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
xattr.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30