Unverified Commit fe164f57 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!8605 smb: client: fix use-after-free bug in cifs_debug_data_proc_show() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Wang Zhaolong <wangzhaolong1@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/XDHC66ZAWOBMDOZOMSKVTRYFO5XHMG52/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9R4LM 
 
Link:https://gitee.com/openeuler/kernel/pulls/8605

 

Reviewed-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents ed0fbaa8 3fe1bf42

fs/cifs/cifs_debug.c

+2 −0
Original line number Diff line number Diff line
@@ -356,6 +356,8 @@ static int cifs_debug_data_proc_show(struct seq_file *m, void *v) 
		list_for_each(tmp2, &server->smb_ses_list) {

			ses = list_entry(tmp2, struct cifs_ses,

					 smb_ses_list);

			if (ses->status == CifsExiting)

				continue;

			if ((ses->serverDomain == NULL) ||

				(ses->serverOS == NULL) ||

				(ses->serverNOS == NULL)) {

fs/cifs/connect.c

+1 −1
Original line number Diff line number Diff line
@@ -2877,12 +2877,12 @@ void cifs_put_smb_ses(struct cifs_ses *ses) 
		spin_unlock(&cifs_tcp_ses_lock);

		return;

	}

	spin_unlock(&cifs_tcp_ses_lock);



	spin_lock(&GlobalMid_Lock);

	if (ses->status == CifsGood)

		ses->status = CifsExiting;

	spin_unlock(&GlobalMid_Lock);

	spin_unlock(&cifs_tcp_ses_lock);



	cifs_free_ipc(ses);