Skip to main content

Browse the archive

Revision 8aaff15168cfbc7c8980fdb0e8a585f1afe56ec0 authored by Ilya Dryomov on 24 August 2018, 13:32:43 UTC, committed by Ilya Dryomov on 06 September 2018, 14:18:04 UTC 
ceph: avoid a use-after-free in ceph_destroy_options()
 
syzbot reported a use-after-free in ceph_destroy_options(), called from
ceph_mount().  The problem was that create_fs_client() consumed the opt
pointer on some errors, but not on all of them.  Make sure it always
consumes both libceph and ceph options.

Reported-by: syzbot+8ab6f1042021b4eed062@syzkaller.appspotmail.com
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Reviewed-by: "Yan, Zheng" <zyan@redhat.com>
1 parent 5736184
Raw File
.cocciconfig 
[spatch]
	options = --timeout 200
	options = --use-gitgrep
back to top