Pan Bian 89ed5b72e5 ext2: fix potential use after free ... commit ecebf55d27a11538ea84aee0be643dd953f830d5 upstream. The function ext2_xattr_set calls brelse(bh) to drop the reference count of bh. After that, bh may be freed. However, following brelse(bh), it reads bh->b_data via macro HDR(bh). This may result in a use-after-free bug. This patch moves brelse(bh) after reading field. CC: stable@vger.kernel.org Signed-off-by: Pan Bian <bianpan2016@163.com> Signed-off-by: Jan Kara <jack@suse.cz> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-12-13 09:21:27 +01:00
..
acl.c	ext2: Don't clear SGID when inheriting ACLs	2018-01-31 12:06:11 +01:00
acl.h
balloc.c
dir.c
ext2.h
file.c
ialloc.c
inode.c	ext2: fix a block leak	2018-05-26 08:48:58 +02:00
ioctl.c
Kconfig
Makefile
namei.c	do d_instantiate/unlock_new_inode combinations safely	2018-05-30 07:48:52 +02:00
super.c
symlink.c
xattr.c	ext2: fix potential use after free	2018-12-13 09:21:27 +01:00
xattr.h
xattr_security.c
xattr_trusted.c
xattr_user.c