Files
linux/include/linux
Jan Kara 5838d4442b fanotify: fix double free of pending permission events
Commit 8581679424 ("fanotify: Fix use after free for permission
events") introduced a double free issue for permission events which are
pending in group's notification queue while group is being destroyed.
These events are freed from fanotify_handle_event() but they are not
removed from groups notification queue and thus they get freed again
from fsnotify_flush_notify().

Fix the problem by removing permission events from notification queue
before freeing them if we skip processing access response.  Also expand
comments in fanotify_release() to explain group shutdown in detail.

Fixes: 8581679424
Signed-off-by: Jan Kara <jack@suse.cz>
Reported-by: Douglas Leeder <douglas.leeder@sophos.com>
Tested-by: Douglas Leeder <douglas.leeder@sophos.com>
Reported-by: Heinrich Schuchard <xypron.glpk@gmx.de>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2014-08-06 18:01:12 -07:00
..
2014-05-06 17:54:53 -04:00
2014-06-03 23:12:20 +02:00
2014-08-01 22:35:55 +08:00
2014-07-08 13:36:52 -07:00
2014-06-04 13:34:30 +09:00
2014-04-01 23:19:14 -04:00
2014-07-13 21:38:49 -04:00
2014-04-18 14:20:48 +02:00
2014-05-20 10:30:40 +09:00
2014-06-06 16:08:13 -07:00
2014-06-02 16:05:24 -07:00
2014-06-02 14:56:01 -07:00
2014-07-08 09:40:06 +02:00
2014-04-17 12:30:40 -07:00
2014-06-16 16:26:54 +02:00
2014-06-25 17:45:43 -07:00
2014-07-22 21:55:45 +01:00
2014-05-27 17:38:11 -07:00
2014-04-01 23:19:08 -04:00
2014-04-01 23:19:10 -04:00
2014-04-07 10:59:19 -07:00
2014-07-09 14:58:37 +01:00
2014-06-04 16:54:07 -07:00
2014-06-04 16:54:21 -07:00
2014-05-05 17:25:50 +10:00
2014-06-04 16:54:12 -07:00
2014-06-06 16:08:12 -07:00
2014-06-12 00:21:11 -04:00
2014-06-04 16:53:57 -07:00
2014-06-04 16:53:56 -07:00
2014-05-14 09:46:32 -07:00
2014-05-30 11:35:54 -06:00
2014-06-04 16:53:57 -07:00
2014-04-07 16:35:53 -07:00
2014-06-04 16:53:57 -07:00