Skip to contentSkip to conversation

reiser4: fix a use after free bug in reiser4_parse_options

PATCH New Laurent Riffard 1 participant 1 message Nov 17, 2004

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 reiser4: fix a use after free bug in reiser4_parse_options

This patch fix a "use after kfree" bug in reiser4_parse_options.

---

fs/reiser4/vfs_ops.c +0 -0
diff -u linux-2.6-orig/fs/reiser4/vfs_ops.c linux-2.6/fs/reiser4/vfs_ops.c
@@ -1060,8 +1060,6 @@
	});

#endif

- kfree(opts);
-

	sbinfo->tmgr.atom_max_size = txnmgr_get_max_atom_size(s);
	sbinfo->tmgr.atom_max_age = REISER4_ATOM_MAX_AGE / HZ;
	sbinfo->tmgr.atom_max_flushers = ATOM_MAX_FLUSHERS;
@@ -1089,6 +1087,9 @@
	sbinfo->ra_params.flags = 0;

	result = parse_options(opt_string, opts, p - opts);
+
+	kfree(opts);
+
	if (result != 0)
		return result;
Signature · 1 line
laurent