Commit 248c944e authored by Dan Carpenter's avatar Dan Carpenter Committed by David Howells

afs: Fix a use after free in afs_xattr_get_acl()

The "op" pointer is freed earlier when we call afs_put_operation().

Fixes: e49c7b2f ("afs: Build an abstraction around an "operation" concept")
Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarDavid Howells <dhowells@redhat.com>
cc: Colin Ian King <colin.king@canonical.com>
parent acc080d1
...@@ -85,7 +85,7 @@ static int afs_xattr_get_acl(const struct xattr_handler *handler, ...@@ -85,7 +85,7 @@ static int afs_xattr_get_acl(const struct xattr_handler *handler,
if (acl->size <= size) if (acl->size <= size)
memcpy(buffer, acl->data, acl->size); memcpy(buffer, acl->data, acl->size);
else else
op->error = -ERANGE; ret = -ERANGE;
} }
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment