Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d07c5076 authored by Pan Bian's avatar Pan Bian Committed by Greg Kroah-Hartman
Browse files

isofs: release buffer head before return 

[ Upstream commit 0a6dc67a6aa45f19bd4ff89b4f468fc50c4b8daa ]

Release the buffer_head before returning error code in
do_isofs_readdir() and isofs_find_entry().

Fixes: 2deb1acc ("isofs: fix access to unallocated memory when reading corrupted filesystem")
Link: https://lore.kernel.org/r/20210118120455.118955-1-bianpan2016@163.com


Signed-off-by: default avatarPan Bian <bianpan2016@163.com>
Signed-off-by: default avatarJan Kara <jack@suse.cz>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
parent 0213f338

fs/isofs/dir.c

+1 −0
Original line number Diff line number Diff line
@@ -151,6 +151,7 @@ static int do_isofs_readdir(struct inode *inode, struct file *file, 
			printk(KERN_NOTICE "iso9660: Corrupted directory entry"

			       " in block %lu of inode %lu\n", block,

			       inode->i_ino);

			brelse(bh);

			return -EIO;

		}

fs/isofs/namei.c

+1 −0
Original line number Diff line number Diff line
@@ -101,6 +101,7 @@ isofs_find_entry(struct inode *dir, struct dentry *dentry, 
			printk(KERN_NOTICE "iso9660: Corrupted directory entry"

			       " in block %lu of inode %lu\n", block,

			       dir->i_ino);

			brelse(bh);

			return 0;

		}