Pan Bian 7f0a62fb6e hfsplus: do not free node before using ...

[ Upstream commit c7d7d620dc ]

hfs_bmap_free() frees node via hfs_bnode_put(node).  However it then
reads node->this when dumping error message on an error path, which may
result in a use-after-free bug.  This patch frees node only when it is
never used.

Link: http://lkml.kernel.org/r/1543053441-66942-1-git-send-email-bianpan2016@163.com
Signed-off-by: Pan Bian <bianpan2016@163.com>
Reviewed-by: Andrew Morton <akpm@linux-foundation.org>
Cc: Ernesto A. Fernandez <ernesto.mnd.fernandez@gmail.com>
Cc: Joe Perches <joe@perches.com>
Cc: Viacheslav Dubeyko <slava@dubeyko.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2018-12-17 09:38:35 +01:00

..

acl.h

…

attributes.c

…

bfind.c

fs/hfsplus: replace if/BUG by BUG_ON

2015-04-17 09:04:05 -04:00

bitmap.c

mm, fs: get rid of PAGE_CACHE_* and page_cache_{get,release} macros

2016-04-04 10:41:08 -07:00

bnode.c

mm, fs: get rid of PAGE_CACHE_* and page_cache_{get,release} macros

2016-04-04 10:41:08 -07:00

brec.c

hfsplus: prevent btree data loss on root split

2018-11-27 16:09:38 +01:00

btree.c

hfsplus: do not free node before using

2018-12-17 09:38:35 +01:00

catalog.c

fs: Replace CURRENT_TIME_SEC with current_time() for inode timestamps

2016-09-27 21:06:22 -04:00

dir.c

hfsplus: fix NULL dereference in hfsplus_lookup()

2018-09-15 09:42:57 +02:00

extents.c

…

hfsplus_fs.h

Merge branch 'for-linus-2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2016-08-07 10:01:14 -04:00

hfsplus_raw.h

…

inode.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2016-10-10 20:16:43 -07:00

ioctl.c

fs: Replace CURRENT_TIME_SEC with current_time() for inode timestamps

2016-09-27 21:06:22 -04:00

Kconfig

…

Makefile

…

options.c

fs: create and use seq_show_option for escaping

2015-09-04 16:54:41 -07:00

part_tbl.c

hfsplus: use bio op accessors

2016-06-07 13:41:38 -06:00

posix_acl.c

hfsplus: Don't clear SGID when inheriting ACLs

2017-07-27 15:08:07 -07:00

super.c

hfsplus: don't return 0 when fill_super() failed

2018-09-15 09:42:57 +02:00

tables.c

…

unicode.c

get rid of 'parent' argument of ->d_compare()

2016-07-31 16:37:25 -04:00

wrapper.c

hfsplus: use bio op accessors

2016-06-07 13:41:38 -06:00

xattr_security.c

switch xattr_handler->set() to passing dentry and inode separately

2016-05-27 15:39:43 -04:00

xattr_trusted.c

switch xattr_handler->set() to passing dentry and inode separately

2016-05-27 15:39:43 -04:00

xattr_user.c

switch xattr_handler->set() to passing dentry and inode separately

2016-05-27 15:39:43 -04:00

xattr.c

switch xattr_handler->set() to passing dentry and inode separately

2016-05-27 15:39:43 -04:00

xattr.h

switch xattr_handler->set() to passing dentry and inode separately

2016-05-27 15:39:43 -04:00