mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs.git
synced 2026-10-28 12:53:14 +01:00
Amir Goldstein
ae146bc1ab
ovl_do_mkdir() prints the input dentry with %pd after vfs_mkdir(). Since commitfe497f0759("VFS: change vfs_mkdir() to unlock on failure."), vfs_mkdir() calls end_creating() on the input dentry on failure and may replace it on success, so the post-call %pd can use-after-free the dentry when CONFIG_OVERLAY_FS_DEBUG is enabled. Print the dentry before the call and only the result afterward. Reported-by: [email protected] Closes: https://syzkaller.appspot.com/bug?extid=ced26b784bf977d223dd Fixes:fe497f0759("VFS: change vfs_mkdir() to unlock on failure.") Signed-off-by: Amir Goldstein <[email protected]> Link: https://patch.msgid.link/[email protected] Signed-off-by: Christian Brauner (Amutable) <[email protected]>