Re: [PATCH 2/2] f2fs: free the quota file name that remount drops

[Chao Yu]

On 10/30/26 15:24, Zhan Xusheng wrote:
> From: Zhan Xusheng <zhanxusheng@xxxxxxxxxx>
>
> Remounting with an empty journalled quota option such as "usrjquota="
> clears the name, but f2fs_apply_quota_options() overwrites the old
> string without freeing it, so every such remount leaks it.
>
> Free it after a grace period, as f2fs_show_options() may still be
> reading it.
>
> Fixes: d18535132523 ("f2fs: separate the options parsing and options checking")
> Reported-by: syzbot+6c000dea1a93b4f5905c@xxxxxxxxxxxxxxxxxxxxxxxxx
> Closes: https://syzkaller.appspot.com/bug?extid=6c000dea1a93b4f5905c
> Cc: stable@xxxxxxxxxxxxxxx
> Signed-off-by: Zhan Xusheng <zhanxusheng@xxxxxxxxxx>

Reviewed-by: Chao Yu <chao@xxxxxxxxxx>

Thanks,