diff options
| author |   Liu Bo <bo.li.liu@oracle.com> | 2017-04-10 12:36:26 -0700 |
|---|---|---|
| committer |   David Sterba <dsterba@suse.com> | 2017-04-11 18:49:56 +0200 |
| commit | a967efb30b3afa3d858edd6a17f544f9e9e46eea (patch) | |
| tree | 86b2f9e56b32934fc56b46148feb8509cf72c81b /fs/proc/task_mmu.c | |
| parent | Btrfs: fix segmentation fault when doing dio read (diff) | |
| download | linux-dev-a967efb30b3afa3d858edd6a17f544f9e9e46eea.tar.xz linux-dev-a967efb30b3afa3d858edd6a17f544f9e9e46eea.zip | |
Btrfs: fix potential use-after-free for cloned bio
KASAN reports that there is a use-after-free case of bio in btrfs_map_bio.
If we need to submit IOs to several disks at a time, the original bio
would get cloned and mapped to the destination disk, but we really should
use the original bio instead of a cloned bio to do the sanity check
because cloned bios are likely to be freed by its endio.
Reported-by: Diego <diegocg@gmail.com>
Signed-off-by: Liu Bo <bo.li.liu@oracle.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Diffstat (limited to 'fs/proc/task_mmu.c')
0 files changed, 0 insertions, 0 deletions