CVE-2016-7097 causes acl leak

Mark Salyzyn
2016-12-05T17:16:36Z

Commit 073931017b49d9458aa351605b43a7e34598caef has several occurrences
of an acl leak.

posix_acl_update_mode(inose, &mode, &acl);

. . .

posix_acl_release(acl);

acl is NULLed in posix_acl_update_mode to signal caller to not update
the acl; but because it is nulled, it is never released.

Sincerely -- Mark Salyzyn