| commit | 63ce5f552beb9bdb41546b3a26c4374758b21815 | [log] [tgz] |
|---|---|---|
| author | Pan Bian <[email protected]> | Fri Feb 01 14:21:26 2019 -0800 |
| committer | Linus Torvalds <[email protected]> | Fri Feb 01 15:46:24 2019 -0800 |
| tree | 318f69dfe1f4e61e6f5fc4d5c634389f1167289e | |
| parent | c27d82f52f75fc9d8d9d40d120d2a96fdeeada5e [diff] |
autofs: drop dentry reference only when it is never used autofs_expire_run() calls dput(dentry) to drop the reference count of dentry. However, dentry is read via autofs_dentry_ino(dentry) after that. This may result in a use-free-bug. The patch drops the reference count of dentry only when it is never used. Link: http://lkml.kernel.org/r/154725122396.11260.16053424107144453867.stgit@pluto-themaw-net Signed-off-by: Pan Bian <[email protected]> Signed-off-by: Ian Kent <[email protected]> Signed-off-by: Andrew Morton <[email protected]> Signed-off-by: Linus Torvalds <[email protected]>