diff options
| author | Filipe Manana <[email protected]> | 2024-07-04 16:11:20 +0100 |
|---|---|---|
| committer | David Sterba <[email protected]> | 2024-07-11 16:32:22 +0200 |
| commit | 8e7860543a94784d744c7ce34b78a2e11beefa5c (patch) | |
| tree | 9fd6c89883a59adce50cf5604e6a33520c30dd47 /lib/debugobjects.c | |
| parent | 320d8dc612660da84c3b70a28658bb38069e5a9a (diff) | |
btrfs: fix extent map use-after-free when adding pages to compressed bio
At add_ra_bio_pages() we are accessing the extent map to calculate
'add_size' after we dropped our reference on the extent map, resulting
in a use-after-free. Fix this by computing 'add_size' before dropping our
extent map reference.
Reported-by: [email protected]
Link: https://lore.kernel.org/linux-btrfs/[email protected]/
Fixes: 6a4049102055 ("btrfs: subpage: make add_ra_bio_pages() compatible")
CC: [email protected] # 6.1+
Signed-off-by: Filipe Manana <[email protected]>
Reviewed-by: David Sterba <[email protected]>
Signed-off-by: David Sterba <[email protected]>
Diffstat (limited to 'lib/debugobjects.c')
0 files changed, 0 insertions, 0 deletions