linux/fs/fuse
Miklos Szeredi d78092e493 fuse: fix page dereference after free
After unlock_request() pages from the ap->pages[] array may be put (e.g. by
aborting the connection) and the pages can be freed.

Prevent use after free by grabbing a reference to the page before calling
unlock_request().

The original patch was created by Pradeep P V K.

Reported-by: Pradeep P V K <ppvk@codeaurora.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
2020-09-18 10:36:50 +02:00
..
acl.c
control.c treewide: Remove uninitialized_var() usage 2020-07-16 12:35:15 -07:00
cuse.c treewide: Remove uninitialized_var() usage 2020-07-16 12:35:15 -07:00
dax.c virtiofs: add logic to free up a memory range 2020-09-10 11:39:23 +02:00
dev.c fuse: fix page dereference after free 2020-09-18 10:36:50 +02:00
dir.c virtiofs: serialize truncate/punch_hole and dax fault path 2020-09-10 11:39:23 +02:00
file.c virtiofs: serialize truncate/punch_hole and dax fault path 2020-09-10 11:39:23 +02:00
fuse_i.h virtiofs: add logic to free up a memory range 2020-09-10 11:39:23 +02:00
inode.c virtiofs: serialize truncate/punch_hole and dax fault path 2020-09-10 11:39:23 +02:00
Kconfig virtiofs: implement dax read/write operations 2020-09-10 11:39:23 +02:00
Makefile virtiofs: add a mount option to enable dax 2020-09-10 11:39:22 +02:00
readdir.c fuse: use true,false for bool variable 2020-02-06 16:39:28 +01:00
virtio_fs.c virtiofs: add logic to free up a memory range 2020-09-10 11:39:23 +02:00
xattr.c fuse: rearrange and resize fuse_args fields 2019-09-10 16:29:48 +02:00