[GIT PULL] fanotify use-after-free fixes

From: Jan Kara
Date: Wed Jan 29 2014 - 08:12:36 EST


Hello Linus,

could you please pull from

git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs.git for_linus

The pull contains three fixes for the fanotify use after free problems guys
were reporting. I have ended up with different lifetime rules for struct
fanotify_event_info depending on whether it is for permission event or
normal event which isn't ideal. My plan is to split these into two
different structures (as permission events need larger struct anyway) which
will make the rules trivial again. But that can wait for later I guess (but
I can add the patch to the pile if you want), now I wanted to make -rc1
boot for these guys.

Top of the tree is 85816794240b. The full shortlog is:

Jan Kara (3):
fanotify: Fix use after free in mask checking
fsnotify: Do not return merged event from fsnotify_add_notify_event()
fanotify: Fix use after free for permission events

The diffstat is

fs/notify/fanotify/fanotify.c | 40 ++++++++++++++++++------------------
fs/notify/fanotify/fanotify.h | 7 +++++++
fs/notify/fanotify/fanotify_user.c | 7 ++++++-
fs/notify/inotify/inotify_fsnotify.c | 19 +++++++----------
fs/notify/notification.c | 24 +++++++++++-----------
include/linux/fsnotify_backend.h | 8 ++++----
6 files changed, 56 insertions(+), 49 deletions(-)

Thanks
Honza
--
Jan Kara <jack@xxxxxxx>
SUSE Labs, CR
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/