Al Viro d893f1bc2a fix open/umount race
nameidata_to_filp() drops nd->path or transfers it to opened
file.  In the former case it's a Bad Idea(tm) to do mnt_drop_write()
on nd->path.mnt, since we might race with umount and vfsmount in
question might be gone already.

Fix: don't drop it, then...  IOW, have nameidata_to_filp() grab nd->path
in case it transfers it to file and do path_drop() in callers.  After
they are through with accessing nd->path...

Reported-by: Miklos Szeredi <miklos@szeredi.hu>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
2010-10-29 04:14:56 -04:00
..
2010-10-25 21:26:11 -04:00
2010-10-25 21:26:11 -04:00
2010-10-25 21:26:11 -04:00
2010-10-25 21:26:11 -04:00
2010-08-18 01:01:33 -04:00
2010-10-25 21:26:11 -04:00
2010-10-25 21:26:13 -04:00
2010-10-27 18:03:17 -07:00
2010-10-25 21:24:16 -04:00
2010-10-26 16:52:12 -07:00
2010-10-25 21:26:11 -04:00
2010-10-25 21:26:11 -04:00
2010-10-25 21:26:11 -04:00
2010-10-25 21:26:11 -04:00
2010-10-25 21:27:18 -04:00
2010-10-25 21:26:11 -04:00
2010-10-21 18:48:04 +02:00
2010-10-25 21:26:11 -04:00
2010-10-25 21:26:11 -04:00
2010-10-25 21:26:11 -04:00
2010-10-25 21:26:11 -04:00
2010-10-25 21:26:11 -04:00
2010-10-25 21:26:15 -04:00
2010-10-28 09:44:56 -07:00
2010-10-15 15:53:27 +02:00
2010-08-18 08:35:46 -04:00
2010-10-25 21:27:18 -04:00
2010-10-27 21:30:11 -04:00
2010-10-28 09:44:56 -07:00
2010-10-25 21:26:11 -04:00
2010-10-28 09:44:56 -07:00
2010-10-29 04:14:56 -04:00
2010-10-29 04:14:56 -04:00
2010-08-18 08:35:48 -04:00
2010-08-09 16:48:44 -04:00
2010-10-25 21:27:18 -04:00
2010-08-09 16:47:43 -04:00