Messages in this thread | | | Subject | [PATCH 2 0/2] xfs: fix inline link path race | From | Ian Kent <> | Date | Mon, 15 Nov 2021 10:24:16 +0800 |
| |
If the inode of an inline symlink is released (dropped) while a path walk that is in rcu-walk mode is occuring the inode ->get_link() method can be NULL when VFS dereferences it causing a crash. But, since the release can occur at any time there's a small but finite possibility the link path text could be freed while it's being used.
Changes since v1: - don't bother trying to rcu-free the link path since there could be side effects from the xfs reclaim code. ---
Ian Kent (2): vfs: check dentry is still valid in get_link() xfs: make sure link path does not go away at access
fs/xfs/xfs_iops.c | 3 +++ 1 file changed, 3 insertions(+)
-- Ian
| |