diff options
author | Linus Torvalds <torvalds@linux-foundation.org> | 2023-07-02 20:10:22 +0200 |
---|---|---|
committer | Linus Torvalds <torvalds@linux-foundation.org> | 2023-07-02 20:10:22 +0200 |
commit | 28c7980fa14a3fbd8926686cfffb89b9542b0da1 (patch) | |
tree | 0f0e7dbc2e2c9e6f519d8fedf82e9b2034e2d22f /MAINTAINERS | |
parent | Merge tag 'i2c-for-6.5-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/... (diff) | |
parent | fs: move cleanup from init_file() into its callers (diff) | |
download | linux-28c7980fa14a3fbd8926686cfffb89b9542b0da1.tar.xz linux-28c7980fa14a3fbd8926686cfffb89b9542b0da1.zip |
Merge tag 'v6.5/vfs.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
Pull vfs fix from Christian Brauner:
"A fix for the backing file work from this cycle.
When init_file() failed it would call file_free_rcu() on the file
allocated by the caller of init_file(). It naively assumed that the
correct cleanup operation would be called depending on whether it is a
regular file or a backing file. However, that presupposes that the
FMODE_BACKING flag would already be set which it won't be as that is
done in the caller of init_file().
Fix that bug by moving the cleanup of the allocated file into the
caller where it belongs in the first place. There's no good reason for
init_file() to consume resources it didn't allocate. This is a
mainline only fix and was reported by syzbot. The fix was validated by
syzbot against the provided reproducer"
* tag 'v6.5/vfs.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs:
fs: move cleanup from init_file() into its callers
Diffstat (limited to 'MAINTAINERS')
0 files changed, 0 insertions, 0 deletions