Jan Kara 0c0214df28 fanotify: Fix crash in fanotify_init(2) ...

The rrror handling in fanotify_init(2) is buggy and overwrites 'fd'
before calling put_unused_fd() leading to possible access beyond the end
of fd bitmap. Fix it.

Reported-by: syzbot+6a3aa63412255587b21b@syzkaller.appspotmail.com
Fixes: ebe559609d ("fs: get rid of __FMODE_NONOTIFY kludge")
Signed-off-by: Jan Kara <jack@suse.cz>

2025-01-06 12:08:42 +01:00

..

dnotify

get rid of ...lookup...fdget_rcu() family

2024-10-07 13:34:41 -04:00

fanotify

fanotify: Fix crash in fanotify_init(2)

2025-01-06 12:08:42 +01:00

inotify

fdget(), more trivial conversions

2024-11-03 01:28:06 -05:00

fdinfo.c

fsnotify: Avoid -Wflex-array-member-not-at-end warning

2024-03-26 10:53:32 +01:00

fdinfo.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

fsnotify.c

fsnotify: pass optional file access range in pre-content event

2024-12-10 12:03:17 +01:00

fsnotify.h

fsnotify: clear PARENT_WATCHED flags lazily

2024-06-05 09:52:38 +02:00

group.c

inotify: Fix possible deadlock in fsnotify_destroy_mark

2024-10-02 15:14:29 +02:00

Kconfig

fs/notify: Remove "select SRCU"

2023-02-02 16:26:06 -08:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mark.c

fsnotify: Fix ordering of iput() and watched_objects decrement

2024-11-18 17:33:13 +01:00

notification.c

fsnotify: Pass group argument to free_event

2021-10-27 12:34:18 +02:00