[PATCH 1/3] audit: don't free_chunk() after fsnotify_add_mark()

2012-08-21 Thread Miklos Szeredi
From: Miklos Szeredi Don't do free_chunk() after fsnotify_add_mark(). That one does a delayed unref via the destroy list and this results in use-after-free. Signed-off-by: Miklos Szeredi Acked-by: Eric Paris CC: sta...@vger.kernel.org --- kernel/audit_tree.c |6 +++--- 1 files changed,

[PATCH 1/3] audit: don't free_chunk() after fsnotify_add_mark()

2012-08-21 Thread Miklos Szeredi
From: Miklos Szeredi mszer...@suse.cz Don't do free_chunk() after fsnotify_add_mark(). That one does a delayed unref via the destroy list and this results in use-after-free. Signed-off-by: Miklos Szeredi mszer...@suse.cz Acked-by: Eric Paris epa...@redhat.com CC: sta...@vger.kernel.org ---

[PATCH 1/3] audit: don't free_chunk() after fsnotify_add_mark()

2012-08-15 Thread Miklos Szeredi
From: Miklos Szeredi Don't do free_chunk() after fsnotify_add_mark(). That one does a delayed unref via the destroy list and this results in use-after-free. Signed-off-by: Miklos Szeredi Acked-by: Eric Paris CC: sta...@vger.kernel.org --- kernel/audit_tree.c |6 +++--- 1 files changed,

[PATCH 1/3] audit: don't free_chunk() after fsnotify_add_mark()

2012-08-15 Thread Miklos Szeredi
From: Miklos Szeredi mszer...@suse.cz Don't do free_chunk() after fsnotify_add_mark(). That one does a delayed unref via the destroy list and this results in use-after-free. Signed-off-by: Miklos Szeredi mszer...@suse.cz Acked-by: Eric Paris epa...@redhat.com CC: sta...@vger.kernel.org ---

Re: [PATCH 1/3] audit: don't free_chunk() after fsnotify_add_mark()

2012-07-06 Thread Eric Paris
On Mon, 2012-06-25 at 19:46 +0200, Miklos Szeredi wrote: > From: Miklos Szeredi > > Don't do free_chunk() after fsnotify_add_mark(). That one does a delayed > unref > via the destroy list and this results in use-after-free. > > Signed-off-by: Miklos Szeredi > CC: sta...@vger.kernel.org Al,

Re: [PATCH 1/3] audit: don't free_chunk() after fsnotify_add_mark()

2012-07-06 Thread Eric Paris
On Mon, 2012-06-25 at 19:46 +0200, Miklos Szeredi wrote: From: Miklos Szeredi mszer...@suse.cz Don't do free_chunk() after fsnotify_add_mark(). That one does a delayed unref via the destroy list and this results in use-after-free. Signed-off-by: Miklos Szeredi mszer...@suse.cz CC: