From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-kernel-owner@vger.kernel.org>
MIME-Version: 1.0
In-Reply-To: <153786915356.22029.14929917223689579717.stgit@localhost.localdomain>
References: <153786915356.22029.14929917223689579717.stgit@localhost.localdomain>
From: Miklos Szeredi <miklos@szeredi.hu>
Date: Mon, 1 Oct 2018 11:26:10 +0200
Message-ID: <CAJfpegsPkKb2Gfd65Yq4qo6dgyCB2Wzy10FYXhzoMbXQW67U=Q@mail.gmail.com>
Subject: Re: [PATCH] fuse: Fix use-after-free in fuse_dev_do_write()
To: Kirill Tkhai <ktkhai@virtuozzo.com>
Cc: Dmitry Vyukov <dvyukov@google.com>,
        syzbot <syzbot+4e975615ca01f2277bdd@syzkaller.appspotmail.com>,
        linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org
Content-Type: text/plain; charset="UTF-8"
Sender: linux-kernel-owner@vger.kernel.org
List-ID: <linux-fsdevel.vger.kernel.org>

On Tue, Sep 25, 2018 at 11:52 AM, Kirill Tkhai <ktkhai@virtuozzo.com> wrote:
> After we found req in request_find() and released the lock,
> everything may happen with the req in parallel.
>
> Keep it alive till we finish touch its memory.
>
> Signed-off-by: Kirill Tkhai <ktkhai@virtuozzo.com>

Applied.

Thanks,
Miklos