diff options
| author | Miklos Szeredi <mszeredi@redhat.com> | 2020-09-18 10:36:50 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-11-01 12:01:05 +0100 |
| commit | 860448e73ba2831ec90570520ed7f39943f444f5 (patch) | |
| tree | c2f31df272d9360c2651567bd70f4fbe2ca06046 /tools | |
| parent | 4e1a23779bdec8099735ff3a6a69347e09f8660c (diff) | |
fuse: fix page dereference after free
commit d78092e4937de9ce55edcb4ee4c5e3c707be0190 upstream.
After unlock_request() pages from the ap->pages[] array may be put (e.g. by
aborting the connection) and the pages can be freed.
Prevent use after free by grabbing a reference to the page before calling
unlock_request().
The original patch was created by Pradeep P V K.
Reported-by: Pradeep P V K <ppvk@codeaurora.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'tools')
0 files changed, 0 insertions, 0 deletions