Skip to content
Snippets Groups Projects
user avatar
Jan Kara authored
When memory allocation of iinfo or block allocation fails, already
allocated struct udf_inode_info gets freed with iput() and
udf_evict_inode() may look at inode fields which are not properly
initialized. Fix it by marking inode bad before dropping reference to it
in udf_new_inode().

Reported-by: default avatar <syzbot+9ca499bb57a2b9e4c652@syzkaller.appspotmail.com>
Signed-off-by: default avatarJan Kara <jack@suse.cz>
f05f2429
History
Name Last commit Last update