lkml.org 
[lkml]   [2021]   [Aug]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [syzbot] KASAN: use-after-free Read in bdev_evict_inode
On Sun, Aug 15, 2021 at 09:49:30PM +0800, Hillf Danton wrote:
> After putting bdi in wb_exit(), wb->bdi is no longer stable. To fix the uaf,
> add the WB_put bit to avoid derefering a unstable pointer.
>
> Only for thoughts.

This doesn't help with the fact that the bdi needs to be alive
until after inode_detach_wb is called. I posted a patch for that last
week, although I'm about to post a v2 as there are more lingering issues
in this area.

\
 
 \ /
  Last update: 2021-08-16 11:36    [W:0.044 / U:0.072 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site