diff options
| author | mjg <mjg@FreeBSD.org> | 2015-07-09 15:06:24 +0000 |
|---|---|---|
| committer | mjg <mjg@FreeBSD.org> | 2015-07-09 15:06:24 +0000 |
| commit | 5bbdbadc3d92551c8a30d4414f8d408976a7f9f8 (patch) | |
| tree | c5574204b3d56a960d50c01a092c4c385e3abb4d /contrib/llvm/include/llvm-c/Object.h | |
| parent | f97075fb600cdc33c56be0af463ad3730f0d0765 (diff) | |
| download | FreeBSD-src-5bbdbadc3d92551c8a30d4414f8d408976a7f9f8.zip FreeBSD-src-5bbdbadc3d92551c8a30d4414f8d408976a7f9f8.tar.gz | |
vfs: plug a use-after-free of fd_rdir in namei
fd_rdir vnode was stored in ni_rootdir without refing it in any way,
after which the filedsc lock was being dropped.
The vnode could have been freed by mountcheckdirs or another thread doing
chroot.
VREF the vnode while the lock is held.
Reviewed by: kib
MFC after: 1 week
Diffstat (limited to 'contrib/llvm/include/llvm-c/Object.h')
0 files changed, 0 insertions, 0 deletions
