mirror of
				https://github.com/torvalds/linux.git
				synced 2025-11-04 10:40:15 +02:00 
			
		
		
		
	reiserfs: Add missing calls to reiserfs_security_free()
Commit57fe60df62("reiserfs: add atomic addition of selinux attributes during inode creation") defined reiserfs_security_free() to free the name and value of a security xattr allocated by the active LSM through security_old_inode_init_security(). However, this function is not called in the reiserfs code. Thus, add a call to reiserfs_security_free() whenever reiserfs_security_init() is called, and initialize value to NULL, to avoid to call kfree() on an uninitialized pointer. Finally, remove the kfree() for the xattr name, as it is not allocated anymore. Fixes:57fe60df62("reiserfs: add atomic addition of selinux attributes during inode creation") Cc: stable@vger.kernel.org Cc: Jeff Mahoney <jeffm@suse.com> Cc: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Reported-by: Mimi Zohar <zohar@linux.ibm.com> Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com> Reviewed-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Paul Moore <paul@paul-moore.com>
This commit is contained in:
		
							parent
							
								
									f6fbd8cbf3
								
							
						
					
					
						commit
						572302af12
					
				
					 2 changed files with 5 additions and 1 deletions
				
			
		| 
						 | 
					@ -696,6 +696,7 @@ static int reiserfs_create(struct user_namespace *mnt_userns, struct inode *dir,
 | 
				
			||||||
 | 
					
 | 
				
			||||||
out_failed:
 | 
					out_failed:
 | 
				
			||||||
	reiserfs_write_unlock(dir->i_sb);
 | 
						reiserfs_write_unlock(dir->i_sb);
 | 
				
			||||||
 | 
						reiserfs_security_free(&security);
 | 
				
			||||||
	return retval;
 | 
						return retval;
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -779,6 +780,7 @@ static int reiserfs_mknod(struct user_namespace *mnt_userns, struct inode *dir,
 | 
				
			||||||
 | 
					
 | 
				
			||||||
out_failed:
 | 
					out_failed:
 | 
				
			||||||
	reiserfs_write_unlock(dir->i_sb);
 | 
						reiserfs_write_unlock(dir->i_sb);
 | 
				
			||||||
 | 
						reiserfs_security_free(&security);
 | 
				
			||||||
	return retval;
 | 
						return retval;
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -878,6 +880,7 @@ static int reiserfs_mkdir(struct user_namespace *mnt_userns, struct inode *dir,
 | 
				
			||||||
	retval = journal_end(&th);
 | 
						retval = journal_end(&th);
 | 
				
			||||||
out_failed:
 | 
					out_failed:
 | 
				
			||||||
	reiserfs_write_unlock(dir->i_sb);
 | 
						reiserfs_write_unlock(dir->i_sb);
 | 
				
			||||||
 | 
						reiserfs_security_free(&security);
 | 
				
			||||||
	return retval;
 | 
						return retval;
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -1194,6 +1197,7 @@ static int reiserfs_symlink(struct user_namespace *mnt_userns,
 | 
				
			||||||
	retval = journal_end(&th);
 | 
						retval = journal_end(&th);
 | 
				
			||||||
out_failed:
 | 
					out_failed:
 | 
				
			||||||
	reiserfs_write_unlock(parent_dir->i_sb);
 | 
						reiserfs_write_unlock(parent_dir->i_sb);
 | 
				
			||||||
 | 
						reiserfs_security_free(&security);
 | 
				
			||||||
	return retval;
 | 
						return retval;
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -50,6 +50,7 @@ int reiserfs_security_init(struct inode *dir, struct inode *inode,
 | 
				
			||||||
	int error;
 | 
						int error;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
	sec->name = NULL;
 | 
						sec->name = NULL;
 | 
				
			||||||
 | 
						sec->value = NULL;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
	/* Don't add selinux attributes on xattrs - they'll never get used */
 | 
						/* Don't add selinux attributes on xattrs - they'll never get used */
 | 
				
			||||||
	if (IS_PRIVATE(dir))
 | 
						if (IS_PRIVATE(dir))
 | 
				
			||||||
| 
						 | 
					@ -95,7 +96,6 @@ int reiserfs_security_write(struct reiserfs_transaction_handle *th,
 | 
				
			||||||
 | 
					
 | 
				
			||||||
void reiserfs_security_free(struct reiserfs_security_handle *sec)
 | 
					void reiserfs_security_free(struct reiserfs_security_handle *sec)
 | 
				
			||||||
{
 | 
					{
 | 
				
			||||||
	kfree(sec->name);
 | 
					 | 
				
			||||||
	kfree(sec->value);
 | 
						kfree(sec->value);
 | 
				
			||||||
	sec->name = NULL;
 | 
						sec->name = NULL;
 | 
				
			||||||
	sec->value = NULL;
 | 
						sec->value = NULL;
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in a new issue