diff options context: 1 2 3 4 5 6 7 8 9 10 15 20 25 30 35 40 space: include ignore mode: unified ssdiff stat only

author 2020-09-18 10:36:50 +0200 committer 2020-09-18 10:36:50 +0200 commit d78092e4937de9ce55edcb4ee4c5e3c707be0190 (patch) tree 6374d3ef13d8ee1b6e442b42447005f4e5d35c36 parent 9a752d18c85ae5da28e4a07d52adfd95eacb2495 (diff) download fuse-for-next.tar.gz



for-next fuse: fix page dereference after free

After unlock_request() pages from the ap->pages[] array may be put (e.g. by aborting the connection) and the pages can be freed. Prevent use after free by grabbing a reference to the page before calling unlock_request(). The original patch was created by Pradeep P V K. Reported-by: Pradeep P V K <ppvk@codeaurora.org> Cc: <stable@vger.kernel.org> Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>

1 files changed, 18 insertions, 10 deletions