[PATCH] Fix a free-wrong-pointer bug in nfs/acl server (CVE-2007-0772)
commit48f51fc263193c5e4f2102548e2ced0ab6be462d
authorGreg Banks <gnb@sgi.com>
Mon, 19 Feb 2007 23:12:34 +0000 (20 10:12 +1100)
committerGreg Kroah-Hartman <gregkh@suse.de>
Tue, 20 Feb 2007 06:35:51 +0000 (19 22:35 -0800)
treeb2e04ad2285e269b092f3e1f295970bd7ee05365
parent03739b5cc1b86536d662b89ce935b0ee68977e23
[PATCH] Fix a free-wrong-pointer bug in nfs/acl server (CVE-2007-0772)

Due to type confusion, when an nfsacl verison 2 'ACCESS' request
finishes and tries to clean up, it calls fh_put on entiredly the
wrong thing and this can cause an oops.

Signed-off-by: Neil Brown <neilb@suse.de>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
fs/nfsd/nfs2acl.c