diff options
| author | Richard Weinberger <richard@nod.at> | 2017-03-30 10:50:49 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2017-04-27 09:10:38 +0200 |
| commit | b93858556fd13c76a36a0c110450fa35eadf5671 (patch) | |
| tree | 415a9544fdce6f43350337c91f62d5abfe3e7af9 /net/mac80211/rx.c | |
| parent | a260ff509b4d5fde2ac5f863cd3015cefbc45189 (diff) | |
| download | linux-stable-b93858556fd13c76a36a0c110450fa35eadf5671.tar.gz linux-stable-b93858556fd13c76a36a0c110450fa35eadf5671.tar.bz2 linux-stable-b93858556fd13c76a36a0c110450fa35eadf5671.zip | |
ubifs: Fix O_TMPFILE corner case in ubifs_link()
commit 32fe905c17f001c0eee13c59afddd0bf2eed509c upstream.
It is perfectly fine to link a tmpfile back using linkat().
Since tmpfiles are created with a link count of 0 they appear
on the orphan list, upon re-linking the inode has to be removed
from the orphan list again.
Ralph faced a filesystem corruption in combination with overlayfs
due to this bug.
Cc: Ralph Sennhauser <ralph.sennhauser@gmail.com>
Cc: Amir Goldstein <amir73il@gmail.com>
Reported-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
Tested-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
Reported-by: Amir Goldstein <amir73il@gmail.com>
Fixes: 474b93704f321 ("ubifs: Implement O_TMPFILE")
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'net/mac80211/rx.c')
0 files changed, 0 insertions, 0 deletions