diff options
| author | Eric Biggers <ebiggers@google.com> | 2019-10-17 04:48:14 +0200 |
|---|---|---|
| committer | Al Viro <viro@zeniv.linux.org.uk> | 2019-10-17 05:15:09 +0200 |
| commit | 0ecee66990644c3482209ff7c12faa7bc40449b1 (patch) | |
| tree | b851ba3d0c8801481a22c73182ef338faef632d5 /lib | |
| parent | Linux 5.4-rc3 (diff) | |
| download | linux-0ecee66990644c3482209ff7c12faa7bc40449b1.tar.xz linux-0ecee66990644c3482209ff7c12faa7bc40449b1.zip | |
fs/namespace.c: fix use-after-free of mount in mnt_warn_timestamp_expiry()
After do_add_mount() returns success, the caller doesn't hold a
reference to the 'struct mount' anymore. So it's invalid to access it
in mnt_warn_timestamp_expiry().
Fix it by calling mnt_warn_timestamp_expiry() before do_add_mount()
rather than after, and adjusting the warning message accordingly.
Reported-by: syzbot+da4f525235510683d855@syzkaller.appspotmail.com
Fixes: f8b92ba67c5d ("mount: Add mount warning for impending timestamp expiry")
Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'lib')
0 files changed, 0 insertions, 0 deletions