diff options
| author |   Miklos Szeredi <mszeredi@redhat.com> | 2017-02-16 15:08:20 +0100 |
|---|---|---|
| committer | Miklos Szeredi <mszeredi@redhat.com> | 2017-02-16 15:08:20 +0100 |
| commit | 84588a93d097bace24b9233930f82511d4f34210 (patch) | |
| tree | b3b90dce83da14364e0f165ecf651091257cfca6 /fs | |
| parent | fuse: fix use after free issue in fuse_dev_do_read() (diff) | |
| download | linux-dev-84588a93d097bace24b9233930f82511d4f34210.tar.xz linux-dev-84588a93d097bace24b9233930f82511d4f34210.zip | |
fuse: fix uninitialized flags in pipe_buffer
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Fixes: d82718e348fe ("fuse_dev_splice_read(): switch to add_to_pipe()")
Cc: <stable@vger.kernel.org> # 4.9+
Diffstat (limited to 'fs')
| -rw-r--r-- | fs/fuse/dev.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c index b656e1805f04..f11792672977 100644 --- a/fs/fuse/dev.c +++ b/fs/fuse/dev.c @@ -1376,6 +1376,7 @@ static ssize_t fuse_dev_splice_read(struct file *in, loff_t *ppos, * code can Oops if the buffer persists after module unload. */ bufs[page_nr].ops = &nosteal_pipe_buf_ops; + bufs[page_nr].flags = 0; ret = add_to_pipe(pipe, &bufs[page_nr++]); if (unlikely(ret < 0)) break; |