Received: by 2002:ac0:a5a6:0:0:0:0:0 with SMTP id m35-v6csp3667936imm;
        Mon, 1 Oct 2018 02:27:08 -0700 (PDT)
X-Google-Smtp-Source: ACcGV61DiuHG2A1p+QTRY78h4nj01CzaQe9JejlLBdIpupl8KyIkrDyDYq/y0pE9GsmeeWSa5YnS
X-Received: by 2002:a63:2251:: with SMTP id t17-v6mr1191570pgm.275.1538386028658;
        Mon, 01 Oct 2018 02:27:08 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1538386028; cv=none;
        d=google.com; s=arc-20160816;
        b=abbvaN98bYYoj8OH6E5Z8D00x35LKD/ZCKVdEVhSuON9ztIySx9Qja4vAixAkA0S3n
         2xISMUNrcux+OAzRuoL3EZ50BcP6suXFvWwzIe9UB6Mk/qLEADXvPQXt5e9ugN8DFiEz
         JE182yWkI6ItRYGETcqKTPNa9iCQGZp70ffgwkncqC3yKfUAOc/kuNBWmb5PHejUcEmR
         LcWYDjXZVZMkv/1fW7mWUs9m5rTqMhq9os2ND4Y7axQBBBntgp6j47n+d0vqusfpfUG4
         7o5PViR4clxUS51FavNGInUn/q7Xldx7hFVm62/DsMaNQokN3dlpiLq3Lmc8u1gkP90d
         /ZbQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=list-id:precedence:sender:cc:to:subject:message-id:date:from
         :references:in-reply-to:mime-version:dkim-signature;
        bh=H70Cz97l6J103ITgOrVgob8ZYlE0MLopxBm0tSP3nns=;
        b=ZZetoygyiSTmEahNQEmLICy+p4Nd42/uHuNV/GpwLmco/4z5EVpcrJSO5EK6t2s0f6
         4k6pI1RmI11jfEZSK8eLvFLeJrs7iedGZmak+Kh9MXyJ2nBzBd8Ima5Ny5PNqGpE0Ob3
         JNBNaRSNF5QjtFQUFFdimYQNufcPIlrzu1+IK8EsARJAKLYzNLKbyLk6zicIrTcas7VD
         amYjYe8Bp5xY8voQNVRKjuMpqJv96RE3BBRljP9jXv3c17pyZk/h4znczX8Ovvsdv4UY
         GUEWdY8IesIT3vBZgIc3X9r/v8diBZ9chFNTZoMNuByFeyJ8CKlEXi0OjMuHx5gxe74X
         xD1Q==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=temperror (no key for signature) header.i=@szeredi.hu header.s=google header.b=AOagu1ze;
       spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org
Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67])
        by mx.google.com with ESMTP id m16-v6si11471874pfh.92.2018.10.01.02.26.53;
        Mon, 01 Oct 2018 02:27:08 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Authentication-Results: mx.google.com;
       dkim=temperror (no key for signature) header.i=@szeredi.hu header.s=google header.b=AOagu1ze;
       spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S1729174AbeJAQDC (ORCPT <rfc822;tnerolf.eriarrach@gmail.com>
        + 99 others); Mon, 1 Oct 2018 12:03:02 -0400
Received: from mail-it1-f196.google.com ([209.85.166.196]:38915 "EHLO
        mail-it1-f196.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
        with ESMTP id S1729038AbeJAQDB (ORCPT
        <rfc822;linux-kernel@vger.kernel.org>);
        Mon, 1 Oct 2018 12:03:01 -0400
Received: by mail-it1-f196.google.com with SMTP id w200-v6so10430631itc.4
        for <linux-kernel@vger.kernel.org>; Mon, 01 Oct 2018 02:26:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=szeredi.hu; s=google;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to
         :cc;
        bh=H70Cz97l6J103ITgOrVgob8ZYlE0MLopxBm0tSP3nns=;
        b=AOagu1ze3WjkvUovo3PchzHGYKqMijolhiLf6ndqTlkAhOYJ/DBKsS+Y01kJOUe2So
         3iY8m1jxAQKy9U7saN4EnQqfFlT97YvsHjzK38D+QqKRB2S8YyAPgtlYvc81acsbsiJ/
         j+cXI3ziS9xOiMf/ie22O3nqSuOTW7f/J1ZOM=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:in-reply-to:references:from:date
         :message-id:subject:to:cc;
        bh=H70Cz97l6J103ITgOrVgob8ZYlE0MLopxBm0tSP3nns=;
        b=OrbWvXTMMSM+WSYaoeCO1ybxpHZzMSlx1lIn1GcJ1RKAT3Ryw6cbOhVV7NygTo48vJ
         sPpOCOUJfQLO7kbVcPqvhIR/6haD12LGs/GylKdO4naWyS4t8euywNvKwLWBdyJr6qHq
         iFF0C/2XNTvYU/jhKdmCTQG0RlPAECfqHzDQkvLsOrCAbmLACXdiNp9jSvOQVeNqMe3G
         bOObI3Ab5TlUn7LcfQj9yPXqfVcvGiMHxSk7nnTLn6GB303f54l3dNdpd+SSXQEcPNlO
         q+nkVwQiqifmNHWZhOaT3M3derD2IeMVntpoKNj0BY+rvg/Wd/UwTZ95ObFaXcE8FcNl
         Saew==
X-Gm-Message-State: ABuFfoi/n25xcCVTU7o/2zWHhPQyZOsTzZAGOD2Qy9aEJy2YLbRS/s21
        4HcxIfNPmeiMT5nOzf3NpdGyV2mVr/J2lArTYIlFNA==
X-Received: by 2002:a24:2744:: with SMTP id g65-v6mr5359221ita.47.1538385971058;
 Mon, 01 Oct 2018 02:26:11 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a6b:bf41:0:0:0:0:0 with HTTP; Mon, 1 Oct 2018 02:26:10 -0700 (PDT)
X-Originating-IP: [212.96.48.140]
In-Reply-To: <153786915356.22029.14929917223689579717.stgit@localhost.localdomain>
References: <153786915356.22029.14929917223689579717.stgit@localhost.localdomain>
From:   Miklos Szeredi <miklos@szeredi.hu>
Date:   Mon, 1 Oct 2018 11:26:10 +0200
Message-ID: <CAJfpegsPkKb2Gfd65Yq4qo6dgyCB2Wzy10FYXhzoMbXQW67U=Q@mail.gmail.com>
Subject: Re: [PATCH] fuse: Fix use-after-free in fuse_dev_do_write()
To:     Kirill Tkhai <ktkhai@virtuozzo.com>
Cc:     Dmitry Vyukov <dvyukov@google.com>,
        syzbot <syzbot+4e975615ca01f2277bdd@syzkaller.appspotmail.com>,
        linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org
Content-Type: text/plain; charset="UTF-8"
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

On Tue, Sep 25, 2018 at 11:52 AM, Kirill Tkhai <ktkhai@virtuozzo.com> wrote:
> After we found req in request_find() and released the lock,
> everything may happen with the req in parallel.
>
> Keep it alive till we finish touch its memory.
>
> Signed-off-by: Kirill Tkhai <ktkhai@virtuozzo.com>

Applied.

Thanks,
Miklos