diff options
author | 2020-08-12 05:15:18 +0100 | |
---|---|---|
committer | 2020-08-12 10:22:39 -0700 | |
commit | 24fb33d40d60bd7d196400e7d5b26ff566fd98b7 (patch) | |
tree | 91905714cf8ebad56a8d3a5e889d60d774e5e92e /arch/arm64/mm/fault.c | |
parent | Merge tag 'tag-chrome-platform-for-v5.9' of git://git.kernel.org/pub/scm/linu... (diff) | |
download | linux-24fb33d40d60bd7d196400e7d5b26ff566fd98b7.tar.gz linux-24fb33d40d60bd7d196400e7d5b26ff566fd98b7.tar.bz2 linux-24fb33d40d60bd7d196400e7d5b26ff566fd98b7.zip |
fix breakage in do_rmdir()
syzbot reported and bisected a use-after-free due to the recent init
cleanups.
The putname() should happen only after we'd *not* branched to retry,
same as it's done in do_unlinkat().
Reported-by: syzbot+bbeb1c88016c7db4aa24@syzkaller.appspotmail.com
Fixes: e24ab0ef689d "fs: push the getname from do_rmdir into the callers"
Cc: Christoph Hellwig <hch@lst.de>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'arch/arm64/mm/fault.c')
0 files changed, 0 insertions, 0 deletions