Miklos Szeredi 860448e73b fuse: fix page dereference after free ...

commit d78092e4937de9ce55edcb4ee4c5e3c707be0190 upstream.

After unlock_request() pages from the ap->pages[] array may be put (e.g. by
aborting the connection) and the pages can be freed.

Prevent use after free by grabbing a reference to the page before calling
unlock_request().

The original patch was created by Pradeep P V K.

Reported-by: Pradeep P V K <ppvk@codeaurora.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2020-11-01 12:01:05 +01:00

..

acl.c

fuse: Support fuse filesystems outside of init_user_ns

2018-03-20 17:11:44 +01:00

control.c

convenience helper: get_tree_single()

2019-07-04 22:01:58 -04:00

cuse.c

fuse: fix memleak in cuse_channel_open

2019-09-24 15:28:01 +02:00

dev.c

fuse: fix page dereference after free

2020-11-01 12:01:05 +01:00

dir.c

fuse: verify attributes

2019-12-13 08:42:31 +01:00

file.c

fuse: fix the ->direct_IO() treatment of iov_iter

2020-10-07 08:01:26 +02:00

fuse_i.h

virtiofs: schedule blocking async replies in separate worker

2020-06-24 17:50:21 +02:00

inode.c

fuse: update attr_version counter on fuse_notify_inval_inode()

2020-10-01 13:18:02 +02:00

Kconfig

virtio-fs: add virtiofs filesystem

2019-09-18 20:17:50 +02:00

Makefile

virtio-fs: Change module name to virtiofs.ko

2019-10-14 10:20:33 +02:00

readdir.c

fuse: verify attributes

2019-12-13 08:42:31 +01:00

virtio_fs.c

virtiofs: schedule blocking async replies in separate worker

2020-06-24 17:50:21 +02:00

xattr.c

fuse: rearrange and resize fuse_args fields

2019-09-10 16:29:48 +02:00