Commit ed152437 authored by Al Viro's avatar Al Viro
Browse files

[PATCH] double-free of inode on alloc_file() failure exit in create_write_pipe() 



Duh...  Fortunately, the bug is quite recent (post-2.6.25) and, embarrassingly,
mine ;-/

Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
parent 521b5d0c

fs/pipe.c

+3 −0
Original line number Diff line number Diff line
@@ -988,7 +988,10 @@ struct file *create_write_pipe(void) 
	return f;



 err_dentry:

	free_pipe_info(inode);

	dput(dentry);

	return ERR_PTR(err);



 err_inode:

	free_pipe_info(inode);

	iput(inode);