| commit | fac20b9e738523fc884ee3ea5be360a321cd8bad | [log] [tgz] |
|---|---|---|
| author | David Howells <dhowells@redhat.com> | Thu Jan 30 21:50:35 2020 +0000 |
| committer | David Howells <dhowells@redhat.com> | Thu Jan 30 21:50:41 2020 +0000 |
| tree | ae116a5a1ab3b27ee80d49fe7fea7134ebeaff94 | |
| parent | 9fbf082f569980ddd7cab348e0a118678db0e47e [diff] |
rxrpc: Fix use-after-free in rxrpc_put_local()
Fix rxrpc_put_local() to not access local->debug_id after calling
atomic_dec_return() as, unless that returned n==0, we no longer have the
right to access the object.
Fixes: 06d9532fa6b3 ("rxrpc: Fix read-after-free in rxrpc_queue_local()")
Signed-off-by: David Howells <dhowells@redhat.com>