tree 911017a05e7d7d55f802cb31818bd215c1eefcef
parent d0a73d27b927026832a15d3d982e126fe79a2588
author Al Viro <viro@zeniv.linux.org.uk> 1580048974 -0500
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1580289879 +0100

do_last(): fetch directory ->i_mode and ->i_uid before it's too late

commit d0cb50185ae942b03c4327be322055d622dc79f6 upstream.

may_create_in_sticky() call is done when we already have dropped the
reference to dir.

Fixes: 30aba6656f61e (namei: allow restricted O_CREAT of FIFOs and regular files)
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>