Commit c1f34178 authored by Al Viro's avatar Al Viro Committed by Xie XiuQi
Browse files

debugfs: fix use-after-free on symlink traversal



mainline inclusion
from mainline-5.1-rc4
commit 93b919da
category: bugfix
bugzilla: 13537
CVE: NA

-------------------------------------------------

symlink body shouldn't be freed without an RCU delay.  Switch debugfs to
->destroy_inode() and use of call_rcu(); free both the inode and symlink
body in the callback.  Similar to solution for bpf, only here it's even
more obvious that ->evict_inode() can be dropped.

Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
Signed-off-by: default avatarzhangyi (F) <yi.zhang@huawei.com>
Reviewed-by: default avatarYufen Yu <yuyufen@huawei.com>
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
parent 80f97e37
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment