OSDN Git Service

ubifs: fix use-after-free on symlink traversal
authorAl Viro <viro@zeniv.linux.org.uk>
Tue, 26 Mar 2019 01:40:38 +0000 (01:40 +0000)
committerAl Viro <viro@zeniv.linux.org.uk>
Mon, 1 Apr 2019 04:31:02 +0000 (00:31 -0400)
commit0cdc17ebd2072b6cdd3ec3695ea7ede745664a8b
tree7feee598cba29b9c9adf1a3d7c4e9548860a24f3
parent4fdcfab5b5537c21891e22e65996d4d0dd8ab4ca
ubifs: fix use-after-free on symlink traversal

free the symlink body after the same RCU delay we have for freeing the
struct inode itself, so that traversal during RCU pathwalk wouldn't step
into freed memory.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
fs/ubifs/super.c