mbox series

[2,0/2] xfs: fix inline link path race

Message ID 163694289979.229789.1176392639284347792.stgit@mickey.themaw.net (mailing list archive)
Headers show
Series xfs: fix inline link path race | expand

Message

Ian Kent Nov. 15, 2021, 2:24 a.m. UTC 
If the inode of an inline symlink is released (dropped) while a path walk
that is in rcu-walk mode is occuring the inode ->get_link() method can be
NULL when VFS dereferences it causing a crash. But, since the release can
occur at any time there's a small but finite possibility the link path
text could be freed while it's being used.

Changes since v1:
- don't bother trying to rcu-free the link path since there could
  be side effects from the xfs reclaim code.
---

Ian Kent (2):
      vfs: check dentry is still valid in get_link()
      xfs: make sure link path does not go away at access


 fs/xfs/xfs_iops.c | 3 +++
 1 file changed, 3 insertions(+)

--
Ian