Commit f60311d5 authored Oct 22, 2009 by Anand V. Avati Committed by Miklos Szeredi Nov 04, 2009

fuse: prevent fuse_put_request on invalid pointer



fuse_direct_io() has a loop where requests are allocated in each
iteration. if allocation fails, the loop is broken out and follows
into an unconditional fuse_put_request() on that invalid pointer.

Signed-off-by: Anand V. Avati <avati@gluster.com>
Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
Cc: stable@kernel.org

parent b419148e

fs/fuse/file.c

+2 −1

Original line number	Diff line number	Diff line
		@@ -1063,6 +1063,7 @@ ssize_t fuse_direct_io(struct file file, const char __user buf,
		break;
		}
		}
		if (!IS_ERR(req))
		fuse_put_request(fc, req);
		if (res > 0)
		*ppos = pos;

Admin message