• Jan Kara's avatar
    fanotify: Fix use after free in mask checking · 13116dfd
    Jan Kara authored
    We cannot use the event structure returned from
    fsnotify_add_notify_event() because that event can be freed by the time
    that function returns. Use the mask argument passed into the event
    handler directly instead. This also fixes a possible problem when we
    could unnecessarily wait for permission response for a normal fanotify
    event which got merged with a permission event.
    
    We also disallow merging of permission event with any other event so
    that we know the permission event which we just created is the one on
    which we should wait for permission response.
    Reported-and-tested-by: default avatarJiri Kosina <jkosina@suse.cz>
    Reported-and-tested-by: default avatarDave Jones <davej@fedoraproject.org>
    Signed-off-by: default avatarJan Kara <jack@suse.cz>
    13116dfd
fanotify.c 6.21 KB