If the inode of an inline symlink is released (dropped) while a path walk
that is in rcu-walk mode is occuring the inode ->get_link() method can be
NULL when VFS dereferences it causing a crash. But, since the release can
occur at any time there's a small but finite possibility the link path
text could be freed while it's being used.
Changes since v1:
- don't bother trying to rcu-free the link path since there could
be side effects from the xfs reclaim code.
---
Ian Kent (2):
vfs: check dentry is still valid in get_link()
xfs: make sure link path does not go away at access
fs/xfs/xfs_iops.c | 3 +++
1 file changed, 3 insertions(+)
--
Ian
