]> git.hungrycats.org Git - linux/commit
ext4: fix possible use after free with metadata csum
authorTheodore Ts'o <tytso@mit.edu>
Fri, 30 Nov 2012 02:21:22 +0000 (21:21 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 17 Jan 2013 16:45:59 +0000 (08:45 -0800)
commit5ec1cdca458496eb8e8461738b53fcbc2d024650
tree420b94516109e7e86e0d1169a968dbc65b3293f3
parent6c96e0701d62e20a2d7ac2de6083bbe5841b9b95
ext4: fix possible use after free with metadata csum

commit aeb1e5d69a5be592e86a926be73efb38c55af404 upstream.

Commit fa77dcfafeaa introduces block bitmap checksum calculation into
ext4_new_inode() in the case that block group was uninitialized.
However we brelse() the bitmap buffer before we attempt to checksum it
so we have no guarantee that the buffer is still there.

Fix this by releasing the buffer after the possible checksum
computation.

Signed-off-by: Lukas Czerner <lczerner@redhat.com>
Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
Acked-by: Darrick J. Wong <darrick.wong@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ext4/ialloc.c