Commit ed152437 authored Apr 22, 2008 by Al Viro

[PATCH] double-free of inode on alloc_file() failure exit in create_write_pipe()



Duh...  Fortunately, the bug is quite recent (post-2.6.25) and, embarrassingly,
mine ;-/

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

parent 521b5d0c

fs/pipe.c

+3 −0

Original line number	Diff line number	Diff line
		@@ -988,7 +988,10 @@ struct file *create_write_pipe(void)
		return f;

		err_dentry:
		free_pipe_info(inode);
		dput(dentry);
		return ERR_PTR(err);

		err_inode:
		free_pipe_info(inode);
		iput(inode);