mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-08-21 16:29:59 +00:00
![]() When the file /proc/fs/fscache/objects (available with
CONFIG_FSCACHE_OBJECT_LIST=y) is opened, we request a user key with
description "fscache:objlist", then access its payload. However, a
revoked key has a NULL payload, and we failed to check for this.
request_key() *does* skip revoked keys, but there is still a window
where the key can be revoked before we access its payload.
Fix it by checking for a NULL payload, treating it like a key which was
already revoked at the time it was requested.
Fixes:
|
||
---|---|---|
.. | ||
cache.c | ||
cookie.c | ||
fsdef.c | ||
histogram.c | ||
internal.h | ||
Kconfig | ||
main.c | ||
Makefile | ||
netfs.c | ||
object-list.c | ||
object.c | ||
operation.c | ||
page.c | ||
proc.c | ||
stats.c |