Searched hist:"1 a5a2cfd" (Results 1 – 2 of 2) sorted by relevance
/openbmc/linux/fs/gfs2/ |
H A D | trans.c | 1a5a2cfd Thu Feb 25 10:11:09 CST 2021 Bob Peterson <rpeterso@redhat.com> gfs2: fix use-after-free in trans_drain
This patch adds code to function trans_drain to remove drained bd elements from the ail lists, if queued, before freeing the bd. If we don't remove the bd from the ail, function ail_drain will try to reference the bd after it has been freed by trans_drain.
Thanks to Andy Price for his analysis of the problem.
Reported-by: Andy Price <anprice@redhat.com> Signed-off-by: Bob Peterson <rpeterso@redhat.com> Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
|
H A D | log.c | 1a5a2cfd Thu Feb 25 10:11:09 CST 2021 Bob Peterson <rpeterso@redhat.com> gfs2: fix use-after-free in trans_drain
This patch adds code to function trans_drain to remove drained bd elements from the ail lists, if queued, before freeing the bd. If we don't remove the bd from the ail, function ail_drain will try to reference the bd after it has been freed by trans_drain.
Thanks to Andy Price for his analysis of the problem.
Reported-by: Andy Price <anprice@redhat.com> Signed-off-by: Bob Peterson <rpeterso@redhat.com> Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
|