summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAl Viro <viro@zeniv.linux.org.uk>2009-12-17 04:52:13 -0500
committerAl Viro <viro@zeniv.linux.org.uk>2009-12-17 04:52:13 -0500
commit06777d308f8f9ddb67798d34bf193101a4bdf06c (patch)
treedefc74a60dc75d8fd2b860a3222de4a2e8ea4006
parent718deb6b61e34c200c1f2b706176d9aac334cb2d (diff)
downloadlinux-3.10-06777d308f8f9ddb67798d34bf193101a4bdf06c.tar.gz
linux-3.10-06777d308f8f9ddb67798d34bf193101a4bdf06c.tar.bz2
linux-3.10-06777d308f8f9ddb67798d34bf193101a4bdf06c.zip
dio: fix use-after-free
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
-rw-r--r--fs/direct-io.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/direct-io.c b/fs/direct-io.c
index 4012885d027..e82adc2debb 100644
--- a/fs/direct-io.c
+++ b/fs/direct-io.c
@@ -1206,7 +1206,7 @@ __blockdev_direct_IO(int rw, struct kiocb *iocb, struct inode *inode,
* NOTE: filesystems with their own locking have to handle this
* on their own.
*/
- if (dio->flags & DIO_LOCKING) {
+ if (flags & DIO_LOCKING) {
if (unlikely((rw & WRITE) && retval < 0)) {
loff_t isize = i_size_read(inode);
if (end > isize)