Revision 8aaff15168cfbc7c8980fdb0e8a585f1afe56ec0 authored by Ilya Dryomov on 24 August 2018, 13:32:43 UTC, committed by Ilya Dryomov on 06 September 2018, 14:18:04 UTC
syzbot reported a use-after-free in ceph_destroy_options(), called from ceph_mount(). The problem was that create_fs_client() consumed the opt pointer on some errors, but not on all of them. Make sure it always consumes both libceph and ceph options. Reported-by: syzbot+8ab6f1042021b4eed062@syzkaller.appspotmail.com Signed-off-by: Ilya Dryomov <idryomov@gmail.com> Reviewed-by: "Yan, Zheng" <zyan@redhat.com>
1 parent 5736184
| File | Mode | Size |
|---|---|---|
| encrypted-keys | ||
| Kconfig | -rw-r--r-- | 3.3 KB |
| Makefile | -rw-r--r-- | 627 bytes |
| big_key.c | -rw-r--r-- | 10.3 KB |
| compat.c | -rw-r--r-- | 3.8 KB |
| compat_dh.c | -rw-r--r-- | 1.3 KB |
| dh.c | -rw-r--r-- | 8.7 KB |
| gc.c | -rw-r--r-- | 10.0 KB |
| internal.h | -rw-r--r-- | 10.4 KB |
| key.c | -rw-r--r-- | 30.5 KB |
| keyctl.c | -rw-r--r-- | 42.7 KB |
| keyring.c | -rw-r--r-- | 41.9 KB |
| permission.c | -rw-r--r-- | 2.9 KB |
| persistent.c | -rw-r--r-- | 4.5 KB |
| proc.c | -rw-r--r-- | 7.9 KB |
| process_keys.c | -rw-r--r-- | 21.1 KB |
| request_key.c | -rw-r--r-- | 20.4 KB |
| request_key_auth.c | -rw-r--r-- | 6.8 KB |
| sysctl.c | -rw-r--r-- | 1.8 KB |
| trusted.c | -rw-r--r-- | 29.1 KB |
| trusted.h | -rw-r--r-- | 3.2 KB |
| user_defined.c | -rw-r--r-- | 4.8 KB |
Computing file changes ...
