浏览代码

fuse: fix NULL deref in fuse_file_alloc()

ff is set to NULL and then dereferenced on line 65.  Compile tested only.

Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
CC: stable@kernel.org
Dan Carpenter 16 年之前
父节点
当前提交
bb875b38dc
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      fs/fuse/file.c

+ 1 - 1
fs/fuse/file.c

@@ -54,7 +54,7 @@ struct fuse_file *fuse_file_alloc(struct fuse_conn *fc)
 		ff->reserved_req = fuse_request_alloc();
 		ff->reserved_req = fuse_request_alloc();
 		if (!ff->reserved_req) {
 		if (!ff->reserved_req) {
 			kfree(ff);
 			kfree(ff);
-			ff = NULL;
+			return NULL;
 		} else {
 		} else {
 			INIT_LIST_HEAD(&ff->write_entry);
 			INIT_LIST_HEAD(&ff->write_entry);
 			atomic_set(&ff->count, 0);
 			atomic_set(&ff->count, 0);