File autofs-5.0.7-fix-use-devid-after-free.patch of Package autofs

Overview Repositories Revisions Requests Users Attributes Meta

File autofs-5.0.7-fix-use-devid-after-free.patch of Package autofs (Revision d5a637747f66ae060a9de71d02218c33)

Currently displaying revision d5a637747f66ae060a9de71d02218c33 , Show latest

From: Ian Kent <ikent@redhat.com>
Subject: fix use devid after free
References: bnc#774241

Fix an obvious use after free mistake in lookup_prune_one_cache().

---
 daemon/lookup.c |    7 +++++--
 1 files changed, 5 insertions(+), 2 deletions(-)

Index: autofs-5.0.7/daemon/lookup.c
===================================================================
--- autofs-5.0.7.orig/daemon/lookup.c
+++ autofs-5.0.7/daemon/lookup.c
@@ -1103,15 +1103,18 @@ void lookup_prune_one_cache(struct autof
 		if (valid)
 			cache_delete(mc, key);
 		else if (!is_mounted(_PROC_MOUNTS, path, MNTS_AUTOFS)) {
+			dev_t devid = ap->dev;
 			status = CHE_FAIL;
+			if (ap->type == LKP_DIRECT)
+				devid = this->dev;
 			if (this->ioctlfd == -1)
 				status = cache_delete(mc, key);
 			if (status != CHE_FAIL) {
 				if (ap->type == LKP_INDIRECT) {
 					if (ap->flags & MOUNT_FLAG_GHOST)
-						rmdir_path(ap, path, ap->dev);
+						rmdir_path(ap, path, devid);
 				} else
-					rmdir_path(ap, path, this->dev);
+					rmdir_path(ap, path, devid);
 			}
 		}
 		cache_unlock(mc);

Places

File autofs-5.0.7-fix-use-devid-after-free.patch of Package autofs (Revision d5a637747f66ae060a9de71d02218c33)

Places