ksmbd: fix reference count leak in smb_check_perm_dacl()
mainline inclusion from mainline-5.19-rc1 commit d21a580d category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/I60T7G CVE: NA Reference: https://git.kernel.org/torvalds/linux/c/d21a580dafc6 ------------------------------- The issue happens in a specific path in smb_check_perm_dacl(). When "id" and "uid" have the same value, the function simply jumps out of the loop without decrementing the reference count of the object "posix_acls", which is increased by get_acl() earlier. This may result in memory leaks. Fix it by decreasing the reference count of "posix_acls" before jumping to label "check_access_bits". Fixes: 777cad16 ("ksmbd: remove select FS_POSIX_ACL in Kconfig") Signed-off-by:Xin Xiong <xiongx18@fudan.edu.cn> Signed-off-by:
Xin Tan <tanxin.ctf@gmail.com> Acked-by:
Namjae Jeon <linkinjeon@kernel.org> Signed-off-by:
Steve French <stfrench@microsoft.com> Signed-off-by:
Jason Yan <yanaijie@huawei.com> Signed-off-by:
Zhong Jinghua <zhongjinghua@huawei.com>
Loading
Please sign in to comment