tree a2351f651c18c962898777aff93a197fe8ddec58
parent 211922cfb229d820edcff93113ff64129c14192d
author Al Viro <viro@zeniv.linux.org.uk> 1525623320 -0400
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1527659416 +0200

affs_lookup(): close a race with affs_remove_link()

commit 30da870ce4a4e007c901858a96e9e394a1daa74a upstream.

we unlock the directory hash too early - if we are looking at secondary
link and primary (in another directory) gets removed just as we unlock,
we could have the old primary moved in place of the secondary, leaving
us to look into freed entry (and leaving our dentry with ->d_fsdata
pointing to a freed entry).

Cc: stable@vger.kernel.org # 2.4.4+
Acked-by: David Sterba <dsterba@suse.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>