[PATCH] NFS: fix potential NULL deref in nfs_closedir()

From: Taesoo Kim
Date: Sat Mar 21 2015 - 00:21:38 EST


From: Byoungyoung Lee <lifeasageek@xxxxxxxxx>

When filp->private_data is NULL, put_nfs_open_dir_context()
deferences its pointer (fi->list, fi->cred), similar to what
other file systems handle '.release' api (9p, cifs, btrfs,
ext4, ocfs2).

Signed-off-by: Byoungyoung Lee <lifeasageek@xxxxxxxxx>
Signed-off-by: Taesoo Kim <tsgatesv@xxxxxxxxx>
---
fs/nfs/dir.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/fs/nfs/dir.c b/fs/nfs/dir.c
index c19e16f..434ecf1 100644
--- a/fs/nfs/dir.c
+++ b/fs/nfs/dir.c
@@ -133,7 +133,8 @@ out:
static int
nfs_closedir(struct inode *inode, struct file *filp)
{
- put_nfs_open_dir_context(file_inode(filp), filp->private_data);
+ if (filp->private_data)
+ put_nfs_open_dir_context(file_inode(filp), filp->private_data);
return 0;
}

--
1.9.1

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/