Al Viro e22c11da0a jffs2: fix use-after-free on symlink traversal ...

[ Upstream commit 4fdcfab5b5 ]

free the symlink body after the same RCU delay we have for freeing the
struct inode itself, so that traversal during RCU pathwalk wouldn't step
into freed memory.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2019-05-08 07:21:48 +02:00

43 KiB

Raw Blame History

View Raw