diff options
| author | Elena Reshetova <elena.reshetova@intel.com> | 2017-03-03 12:04:04 +0300 |
|---|---|---|
| committer | Miklos Szeredi <mszeredi@redhat.com> | 2017-04-18 17:58:37 +0300 |
| commit | ec99f6d31f2590a4c0ff2dae8fb1fa27f0647a42 (patch) | |
| tree | 21d44ad6c09ba6799248e53fe85596a3a6d2596e /fs/fuse/fuse_i.h | |
| parent | 4e8c2eb54327a6f8b0ef6d6afb28ab24b721dbe0 (diff) | |
| download | linux-ec99f6d31f2590a4c0ff2dae8fb1fa27f0647a42.tar.xz | |
fuse: convert fuse_req.count from atomic_t to refcount_t
refcount_t type and corresponding API should be
used instead of atomic_t when the variable is used as
a reference counter. This allows to avoid accidental
refcounter overflows that might lead to use-after-free
situations.
Signed-off-by: Elena Reshetova <elena.reshetova@intel.com>
Signed-off-by: Hans Liljestrand <ishkamiel@gmail.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: David Windsor <dwindsor@gmail.com>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Diffstat (limited to 'fs/fuse/fuse_i.h')
| -rw-r--r-- | fs/fuse/fuse_i.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/fuse/fuse_i.h b/fs/fuse/fuse_i.h index 1d6d67e64f49..9d4374032290 100644 --- a/fs/fuse/fuse_i.h +++ b/fs/fuse/fuse_i.h @@ -307,7 +307,7 @@ struct fuse_req { struct list_head intr_entry; /** refcount */ - atomic_t count; + refcount_t count; /** Unique ID for the interrupt request */ u64 intr_unique; |