reiser4: fix a use after free bug in reiser4_parse_options
PATCH 1/1 reiser4: fix a use after free bug in reiser4_parse_options
This patch fix a "use after kfree" bug in reiser4_parse_options.
Signed-off-by Laurent Riffard <[email protected]>
---
fs/reiser4/vfs_ops.c +0 -0
@@ -1060,8 +1060,6 @@
});
#endif
- kfree(opts);
-
sbinfo->tmgr.atom_max_size = txnmgr_get_max_atom_size(s); sbinfo->tmgr.atom_max_age = REISER4_ATOM_MAX_AGE / HZ; sbinfo->tmgr.atom_max_flushers = ATOM_MAX_FLUSHERS; @@ -1089,6 +1087,9 @@ sbinfo->ra_params.flags = 0; result = parse_options(opt_string, opts, p - opts); + + kfree(opts); + if (result != 0) return result;
Signature · 1 line
laurent