diff options
| author | Bob Peterson <rpeterso@redhat.com> | 2020-10-27 10:10:01 -0500 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-11-18 18:24:59 +0100 |
| commit | 89d2da2495f0fb61a1678e644095cd7857a5a00f (patch) | |
| tree | ada277d867ab34c8d440b46db55f18ada691fb81 /lib/string_helpers.c | |
| parent | 71e893cf15d2466696360d39a50d7a722bdae648 (diff) | |
gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free
[ Upstream commit d0f17d3883f1e3f085d38572c2ea8edbd5150172 ]
Function gfs2_clear_rgrpd calls kfree(rgd->rd_bits) before calling
return_all_reservations, but return_all_reservations still dereferences
rgd->rd_bits in __rs_deltree. Fix that by moving the call to kfree below the
call to return_all_reservations.
Signed-off-by: Bob Peterson <rpeterso@redhat.com>
Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'lib/string_helpers.c')
0 files changed, 0 insertions, 0 deletions