Commit a8c35e5c authored Apr 14, 2017 by Fred Isaman Committed by Greg Kroah-Hartman May 25, 2017

NFS: Fix use after free in write error path



commit 1f84ccdf37d0db3a70714d02d51b0b6d45887fb8 upstream.

Signed-off-by: Fred Isaman <fred.isaman@gmail.com>
Fixes: 0bcbf039 ("nfs: handle request add failure properly")
Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

parent 88ac6b7e

fs/nfs/write.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -548,9 +548,9 @@ static void nfs_write_error_remove_page(struct nfs_page *req)
		{
		nfs_unlock_request(req);
		nfs_end_page_writeback(req);
		nfs_release_request(req);
		generic_error_remove_page(page_file_mapping(req->wb_page),
		req->wb_page);
		nfs_release_request(req);
		}

		/*