Unverified Commit 64f60cf1 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!15569 ubi: ubi_create_volume: Fix use-after-free when volume creation failed 

Merge Pull Request from: @ci-robot 
 
PR sync from: Wang Zhaolong <wangzhaolong1@huawei.com>
https://mailweb.openeuler.org/archives/list/kernel@openeuler.org/message/GFK2BIEZMG2XP22X5RNS27COSXAILQMV/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBP1CU 
 
Link:https://gitee.com/openeuler/kernel/pulls/15569

 

Reviewed-by: default avatarYuan Can <yuancan@huawei.com>
Signed-off-by: default avatarYuan Can <yuancan@huawei.com>
parents e002a67f eda559a2

drivers/mtd/ubi/vmt.c

+0 −1
Original line number Diff line number Diff line
@@ -322,7 +322,6 @@ int ubi_create_volume(struct ubi_device *ubi, struct ubi_mkvol_req *req) 
	ubi->volumes[vol_id] = NULL;

	ubi->vol_count -= 1;

	spin_unlock(&ubi->volumes_lock);

	ubi_eba_destroy_table(eba_tbl);

out_acc:

	spin_lock(&ubi->volumes_lock);

	ubi->rsvd_pebs -= vol->reserved_pebs;