bcachefs: Fix rare use after free in read path

Browse source

If the bkey_on_stack_reassemble() call in __bch2_read_indirect_extent()
reallocates the buffer, k in bch2_read - which we pointed at the
bkey_on_stack buffer - will now point to a stale buffer. Whoops.

Signed-off-by: Kent Overstreet <kent.overstreet@gmail.com>
Signed-off-by: Kent Overstreet <kent.overstreet@linux.dev>

...

This commit is contained in:

Kent Overstreet 2020-10-24 20:56:47 -04:00 • committed by Kent Overstreet

parent e00711d2ca

commit 13dcd4abcd

3 changed files with 14 additions and 10 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

7

fs/bcachefs/fs-io.c

View file

11

fs/bcachefs/fs.c

View file

6

fs/bcachefs/io.c

View file