btrfs: fix NULL pointer dereference from free_reloc_roots()
authorNaohiro Aota <naohiro.aota@wdc.com>
Fri, 25 Aug 2017 05:15:14 +0000 (14:15 +0900)
committerRaspbian kernel package updater <root@raspbian.org>
Sun, 8 Oct 2017 01:09:39 +0000 (01:09 +0000)
commit27a5f8a36b445f30ba5eca7b5676a31ab8f028b8
tree3826f6329c9311d49dcf5ee03c388dfbe8f97896
parent4755308601957a6ecb1e18654ae7c3294fc2ada7
btrfs: fix NULL pointer dereference from free_reloc_roots()

commit bb166d7207432d3c7d10c45dc052f12ba3a2121d upstream.

__del_reloc_root should be called before freeing up reloc_root->node.
If not, calling __del_reloc_root() dereference reloc_root->node, causing
the system BUG.

Fixes: 6bdf131fac23 ("Btrfs: don't leak reloc root nodes on error")
Signed-off-by: Naohiro Aota <naohiro.aota@wdc.com>
Reviewed-by: Nikolay Borisov <nborisov@suse.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/btrfs/relocation.c