Pan Bian 164f7e5867 ocfs2: fix potential use after free ... ocfs2_get_dentry() calls iput(inode) to drop the reference count of inode, and if the reference count hits 0, inode is freed. However, in this function, it then reads inode->i_generation, which may result in a use after free bug. Move the put operation later. Link: http://lkml.kernel.org/r/1543109237-110227-1-git-send-email-bianpan2016@163.com Fixes: 781f200cb7a("ocfs2: Remove masklog ML_EXPORT.") Signed-off-by: Pan Bian <bianpan2016@163.com> Reviewed-by: Andrew Morton <akpm@linux-foundation.org> Cc: Mark Fasheh <mark@fasheh.com> Cc: Joel Becker <jlbec@evilplan.org> Cc: Junxiao Bi <junxiao.bi@oracle.com> Cc: Joseph Qi <jiangqi903@gmail.com> Cc: Changwei Ge <ge.changwei@h3c.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2018-11-30 14:56:15 -08:00
..
cluster	ocfs2: free up write context when direct IO failed	2018-11-18 10:15:09 -08:00
dlm	fs/ocfs2/dlm/dlmdebug.c: fix a sleep-in-atomic-context bug in dlm_print_one_mle()	2018-10-26 16:25:18 -07:00
dlmfs
acl.c
acl.h
alloc.c	ocfs2: remove unused pointer 'eb'	2018-10-26 16:25:18 -07:00
alloc.h
aops.c	ocfs2: free up write context when direct IO failed	2018-11-18 10:15:09 -08:00
aops.h
blockcheck.c
blockcheck.h
buffer_head_io.c	ocfs2: don't put and assigning null to bh allocated outside	2018-11-03 10:09:37 -07:00
buffer_head_io.h
dcache.c
dcache.h
dir.c	ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry	2018-11-03 10:09:37 -07:00
dir.h
dlmglue.c	ocfs2: dlmglue: clean up timestamp handling	2018-11-03 10:09:37 -07:00
dlmglue.h
export.c	ocfs2: fix potential use after free	2018-11-30 14:56:15 -08:00
export.h
extent_map.c
extent_map.h
file.c	ocfs2: don't use iocb when EIOCBQUEUED returns	2018-11-03 10:09:37 -07:00
file.h
filecheck.c
filecheck.h
heartbeat.c
heartbeat.h
inode.c
inode.h
ioctl.c
ioctl.h
journal.c	ocfs2: without quota support, avoid calling quota recovery	2018-11-03 10:09:37 -07:00
journal.h
Kconfig
localalloc.c
localalloc.h
locks.c
locks.h
Makefile
mmap.c
mmap.h
move_extents.c	ocfs2: fix deadlock caused by ocfs2_defrag_extent()	2018-11-30 14:56:13 -08:00
move_extents.h
namei.c
namei.h
ocfs1_fs_compat.h
ocfs2_fs.h
ocfs2_ioctl.h
ocfs2_lockid.h
ocfs2_lockingver.h
ocfs2_trace.h
ocfs2.h
quota_global.c
quota_local.c
quota.h
refcounttree.c	vfs: rework data cloning infrastructure	2018-11-02 09:33:08 -07:00
refcounttree.h	ocfs2: remove ocfs2_reflink_remap_range	2018-10-30 10:45:48 +11:00
reservations.c
reservations.h
resize.c
resize.h
slot_map.c
slot_map.h
stack_o2cb.c
stack_user.c
stackglue.c	ocfs2: remove ocfs2_is_o2cb_active()	2018-11-03 10:09:37 -07:00
stackglue.h	ocfs2: remove ocfs2_is_o2cb_active()	2018-11-03 10:09:37 -07:00
suballoc.c
suballoc.h
super.c
super.h
symlink.c
symlink.h
sysfile.c
sysfile.h
uptodate.c
uptodate.h
xattr.c
xattr.h