diff options
| author |   Dan Carpenter <error27@gmail.com> | 2009-01-26 15:00:58 +0100 |
|---|---|---|
| committer |   Miklos Szeredi <mszeredi@suse.de> | 2009-01-26 15:00:58 +0100 |
| commit | bb875b38dc5e343bdb696b2eab8233e4d195e208 (patch) | |
| tree | 45ee0918e29eeb39e72ca0cdc9321ef8960370b6 /fs | |
| parent | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/roland/infiniband (diff) | |
| download | linux-dev-bb875b38dc5e343bdb696b2eab8233e4d195e208.tar.xz linux-dev-bb875b38dc5e343bdb696b2eab8233e4d195e208.zip | |
fuse: fix NULL deref in fuse_file_alloc()
ff is set to NULL and then dereferenced on line 65. Compile tested only.
Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
CC: stable@kernel.org
Diffstat (limited to 'fs')
| -rw-r--r-- | fs/fuse/file.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/fuse/file.c b/fs/fuse/file.c index e8162646a9b5..d9fdb7cec538 100644 --- a/fs/fuse/file.c +++ b/fs/fuse/file.c @@ -54,7 +54,7 @@ struct fuse_file *fuse_file_alloc(struct fuse_conn *fc) ff->reserved_req = fuse_request_alloc(); if (!ff->reserved_req) { kfree(ff); - ff = NULL; + return NULL; } else { INIT_LIST_HEAD(&ff->write_entry); atomic_set(&ff->count, 0); |