[PATCH] Fix a free-wrong-pointer bug in nfs/acl server (CVE-2007-0772)
commite162a033a5882bde0c3bf5a07ee2119f9535cd8c
authorGreg Banks <gnb@sgi.com>
Mon, 19 Feb 2007 23:12:34 +0000 (20 10:12 +1100)
committerGreg Kroah-Hartman <gregkh@suse.de>
Tue, 20 Feb 2007 06:33:33 +0000 (19 22:33 -0800)
treead848c591ab0b4fab69b9f2c218a6989ecf846f2
parent62d0cfcb27cf755cebdc93ca95dabc83608007cd
[PATCH] Fix a free-wrong-pointer bug in nfs/acl server (CVE-2007-0772)

Due to type confusion, when an nfsacl verison 2 'ACCESS' request
finishes and tries to clean up, it calls fh_put on entiredly the
wrong thing and this can cause an oops.

Signed-off-by: Neil Brown <neilb@suse.de>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
fs/nfsd/nfs2acl.c