Linux/linux 30da870fs/affs namei.c

affs_lookup(): close a race with affs_remove_link()

we unlock the directory hash too early - if we are looking at secondary
link and primary (in another directory) gets removed just as we unlock,
we could have the old primary moved in place of the secondary, leaving
us to look into freed entry (and leaving our dentry with ->d_fsdata
pointing to a freed entry).

Cc: stable at vger.kernel.org # 2.4.4+
Acked-by: David Sterba <dsterba at suse.com>
Signed-off-by: Al Viro <viro at zeniv.linux.org.uk>
DeltaFile
+7-3fs/affs/namei.c
+7-31 files

UnifiedSplitRaw