* [PATCH] fs/backing_file: fix wrong argument in callback
@ 2024-11-26 14:53 Amir Goldstein
2024-11-26 16:04 ` Miklos Szeredi
0 siblings, 1 reply; 2+ messages in thread
From: Amir Goldstein @ 2024-11-26 14:53 UTC (permalink / raw)
To: Miklos Szeredi, Christian Brauner
Cc: linux-fsdevel, linux-unionfs, syzbot+8d1206605b05ca9a0e6a
Commit 48b50624aec4 ("backing-file: clean up the API") unintentionally
changed the argument in the ->accessed() callback from the user file to
the backing file.
Fixes: 48b50624aec4 ("backing-file: clean up the API")
Reported-by: syzbot+8d1206605b05ca9a0e6a@syzkaller.appspotmail.com
Closes: https://lore.kernel.org/linux-unionfs/67447b3c.050a0220.1cc393.0085.GAE@google.com/
Tested-by: syzbot+8d1206605b05ca9a0e6a@syzkaller.appspotmail.com
Signed-off-by: Amir Goldstein <amir73il@gmail.com>
---
fs/backing-file.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/fs/backing-file.c b/fs/backing-file.c
index 526ddb4d6f76..cbdad8b68474 100644
--- a/fs/backing-file.c
+++ b/fs/backing-file.c
@@ -327,6 +327,7 @@ int backing_file_mmap(struct file *file, struct vm_area_struct *vma,
struct backing_file_ctx *ctx)
{
const struct cred *old_cred;
+ struct file *user_file = vma->vm_file;
int ret;
if (WARN_ON_ONCE(!(file->f_mode & FMODE_BACKING)))
@@ -342,7 +343,7 @@ int backing_file_mmap(struct file *file, struct vm_area_struct *vma,
revert_creds_light(old_cred);
if (ctx->accessed)
- ctx->accessed(vma->vm_file);
+ ctx->accessed(user_file);
return ret;
}
--
2.34.1
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [PATCH] fs/backing_file: fix wrong argument in callback
2024-11-26 14:53 [PATCH] fs/backing_file: fix wrong argument in callback Amir Goldstein
@ 2024-11-26 16:04 ` Miklos Szeredi
0 siblings, 0 replies; 2+ messages in thread
From: Miklos Szeredi @ 2024-11-26 16:04 UTC (permalink / raw)
To: Amir Goldstein
Cc: Christian Brauner, linux-fsdevel, linux-unionfs,
syzbot+8d1206605b05ca9a0e6a
On Tue, 26 Nov 2024 at 15:53, Amir Goldstein <amir73il@gmail.com> wrote:
>
> Commit 48b50624aec4 ("backing-file: clean up the API") unintentionally
> changed the argument in the ->accessed() callback from the user file to
> the backing file.
>
> Fixes: 48b50624aec4 ("backing-file: clean up the API")
> Reported-by: syzbot+8d1206605b05ca9a0e6a@syzkaller.appspotmail.com
> Closes: https://lore.kernel.org/linux-unionfs/67447b3c.050a0220.1cc393.0085.GAE@google.com/
> Tested-by: syzbot+8d1206605b05ca9a0e6a@syzkaller.appspotmail.com
> Signed-off-by: Amir Goldstein <amir73il@gmail.com>
Acked-by: Miklos Szeredi <mszeredi@redhat.com>
Thanks for fixing.
Miklos
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2024-11-26 16:04 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-11-26 14:53 [PATCH] fs/backing_file: fix wrong argument in callback Amir Goldstein
2024-11-26 16:04 ` Miklos Szeredi
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).