https://github.com/torvalds/linux
Revision d31da0f0ba3bc0a827a63879310818c22d9a95be authored by Al Viro on 22 November 2011, 17:31:21 UTC, committed by Al Viro on 22 November 2011, 17:31:21 UTC
d'oh... we'd carefully pinned mnt->mnt_sb down, dropped mnt and attempt
to grab s_umount on mnt->mnt_sb.  The trouble is, *mnt might've been
overwritten by now...

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
1 parent b464133
History
Tip revision: d31da0f0ba3bc0a827a63879310818c22d9a95be authored by Al Viro on 22 November 2011, 17:31:21 UTC
mount_subtree() pointless use-after-free
Tip revision: d31da0f
File Mode Size
.gitignore -rw-r--r-- 6 bytes
3CCFEM556.cis.ihex -rw-r--r-- 469 bytes
3CXEM556.cis.ihex -rw-r--r-- 463 bytes
COMpad2.cis.ihex -rw-r--r-- 363 bytes
COMpad4.cis.ihex -rw-r--r-- 276 bytes
DP83903.cis.ihex -rw-r--r-- 499 bytes
LA-PCM.cis.ihex -rw-r--r-- 758 bytes
MT5634ZLX.cis.ihex -rw-r--r-- 363 bytes
NE2K.cis.ihex -rw-r--r-- 233 bytes
PCMLM28.cis.ihex -rw-r--r-- 662 bytes
PE-200.cis.ihex -rw-r--r-- 255 bytes
PE520.cis.ihex -rw-r--r-- 266 bytes
RS-COM-2P.cis.ihex -rw-r--r-- 307 bytes
SW_555_SER.cis.ihex -rw-r--r-- 412 bytes
SW_7xx_SER.cis.ihex -rw-r--r-- 460 bytes
SW_8xx_SER.cis.ihex -rw-r--r-- 444 bytes
tamarack.cis.ihex -rw-r--r-- 311 bytes

back to top