android_kernel_oneplus_msm8998/fs/fuse
Miklos Szeredi 6023d16fdb fuse: fix leaked notify reply
commit 7fabaf303458fcabb694999d6fa772cc13d4e217 upstream.

fuse_request_send_notify_reply() may fail if the connection was reset for
some reason (e.g. fs was unmounted).  Don't leak request reference in this
case.  Besides leaking memory, this resulted in fc->num_waiting not being
decremented and hence fuse_wait_aborted() left in a hanging and unkillable
state.

Fixes: 2d45ba381a ("fuse: add retrieve request")
Fixes: b8f95e5d13f5 ("fuse: umount should wait for all requests")
Reported-and-tested-by: syzbot+6339eda9cb4ebbc4c37b@syzkaller.appspotmail.com
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Cc: <stable@vger.kernel.org> #v2.6.36
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-11-21 09:27:44 +01:00
..
control.c fuse: fix control dir setup and teardown 2018-07-03 11:21:28 +02:00
cuse.c fuse: Add reference counting for fuse_io_priv 2016-04-12 09:08:58 -07:00
dev.c fuse: fix leaked notify reply 2018-11-21 09:27:44 +01:00
dir.c fuse: atomic_o_trunc should truncate pagecache 2018-07-03 11:21:28 +02:00
file.c fuse: Dont call set_page_dirty_lock() for ITER_BVEC pages for async_dio 2018-11-10 07:41:37 -08:00
fuse_i.h fuse: Dont call set_page_dirty_lock() for ITER_BVEC pages for async_dio 2018-11-10 07:41:37 -08:00
inode.c fuse: Fix oops at process_init_reply() 2018-09-05 09:18:39 +02:00
Kconfig fuse: Move CUSE Kconfig entry from fs/Kconfig into fs/fuse/Kconfig 2013-01-17 13:08:45 +01:00
Makefile CUSE: implement CUSE - Character device in Userspace 2009-06-09 11:24:11 +02:00