]> dgit.raspbian.org Git - linux-4.9.git/commit
ubifs: Fix O_TMPFILE corner case in ubifs_link()
authorRichard Weinberger <richard@nod.at>
Thu, 30 Mar 2017 08:50:49 +0000 (10:50 +0200)
committerpopcornmix <popcornmix@gmail.com>
Fri, 28 Apr 2017 14:43:48 +0000 (15:43 +0100)
commit39e9481f761db5f78458473a88aeb237fd93b756
tree2cf3f7e348397bcb74f9d69f86697cbd612d08f9
parent679a0fd5436a8ef825c15407ff88def43b68a81b
ubifs: Fix O_TMPFILE corner case in ubifs_link()

commit 32fe905c17f001c0eee13c59afddd0bf2eed509c upstream.

It is perfectly fine to link a tmpfile back using linkat().
Since tmpfiles are created with a link count of 0 they appear
on the orphan list, upon re-linking the inode has to be removed
from the orphan list again.

Ralph faced a filesystem corruption in combination with overlayfs
due to this bug.

Cc: Ralph Sennhauser <ralph.sennhauser@gmail.com>
Cc: Amir Goldstein <amir73il@gmail.com>
Reported-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
Tested-by: Ralph Sennhauser <ralph.sennhauser@gmail.com>
Reported-by: Amir Goldstein <amir73il@gmail.com>
Fixes: 474b93704f321 ("ubifs: Implement O_TMPFILE")
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ubifs/dir.c