diff options
| author | Filipe Manana <[email protected]> | 2024-07-04 15:11:20 +0000 |
|---|---|---|
| committer | David Sterba <[email protected]> | 2024-07-11 14:32:22 +0000 |
| commit | 8e7860543a94784d744c7ce34b78a2e11beefa5c (patch) | |
| tree | 9fd6c89883a59adce50cf5604e6a33520c30dd47 /drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | |
| parent | btrfs: fix bitmap leak when loading free space cache on duplicate entry (diff) | |
| download | kernel-8e7860543a94784d744c7ce34b78a2e11beefa5c.tar.gz kernel-8e7860543a94784d744c7ce34b78a2e11beefa5c.zip | |
btrfs: fix extent map use-after-free when adding pages to compressed bio
At add_ra_bio_pages() we are accessing the extent map to calculate
'add_size' after we dropped our reference on the extent map, resulting
in a use-after-free. Fix this by computing 'add_size' before dropping our
extent map reference.
Reported-by: [email protected]
Link: https://lore.kernel.org/linux-btrfs/[email protected]/
Fixes: 6a4049102055 ("btrfs: subpage: make add_ra_bio_pages() compatible")
CC: [email protected] # 6.1+
Signed-off-by: Filipe Manana <[email protected]>
Reviewed-by: David Sterba <[email protected]>
Signed-off-by: David Sterba <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_object.c')
0 files changed, 0 insertions, 0 deletions