fuse: fix NULL deref in fuse_file_alloc()
ff is set to NULL and then dereferenced on line 65. Compile tested only. Signed-off-by: Dan Carpenter <error27@gmail.com> Signed-off-by: Miklos Szeredi <mszeredi@suse.cz> CC: stable@kernel.org
This commit is contained in:
parent
f3b8436ad9
commit
bb875b38dc
@ -54,7 +54,7 @@ struct fuse_file *fuse_file_alloc(struct fuse_conn *fc)
|
|||||||
ff->reserved_req = fuse_request_alloc();
|
ff->reserved_req = fuse_request_alloc();
|
||||||
if (!ff->reserved_req) {
|
if (!ff->reserved_req) {
|
||||||
kfree(ff);
|
kfree(ff);
|
||||||
ff = NULL;
|
return NULL;
|
||||||
} else {
|
} else {
|
||||||
INIT_LIST_HEAD(&ff->write_entry);
|
INIT_LIST_HEAD(&ff->write_entry);
|
||||||
atomic_set(&ff->count, 0);
|
atomic_set(&ff->count, 0);
|
||||||
|
Loading…
Reference in New Issue
Block a user