Al Viro aaf1569ce4 namei: ->d_inode of a pinned dentry is stable only for positives ...

commit d4565649b6 upstream.

both do_last() and walk_component() risk picking a NULL inode out
of dentry about to become positive, *then* checking its flags and
seeing that it's not negative anymore and using (already stale by
then) value they'd fetched earlier.  Usually ends up oopsing soon
after that...

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-03-03 15:07:13 -08:00

115 KiB

Raw Blame History

View Raw