btrfs: free btrfs_path before copying inodes to userspace
authorAnand Jain <anand.jain@oracle.com>
Thu, 10 Nov 2022 06:06:28 +0000 (11:36 +0530)
committerDavid Sterba <dsterba@suse.com>
Tue, 15 Nov 2022 16:15:44 +0000 (17:15 +0100)
commit418ffb9e3cf6c4e2574d3a732b724916684bd133
treeef749df5d42c51e3b63107ab6e069a7ab37ea3a2
parentb740d806166979488e798e41743aaec051f2443f
btrfs: free btrfs_path before copying inodes to userspace

btrfs_ioctl_logical_to_ino() frees the search path after the userspace
copy from the temp buffer @inodes. Which potentially can lead to a lock
splat.

Fix this by freeing the path before we copy @inodes to userspace.

CC: stable@vger.kernel.org # 4.19+
Signed-off-by: Anand Jain <anand.jain@oracle.com>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
fs/btrfs/ioctl.c