audit: don't free_chunk() after fsnotify_add_mark()
authorMiklos Szeredi <mszeredi@suse.cz>
Wed, 15 Aug 2012 10:55:22 +0000 (12:55 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 14 Sep 2012 17:00:38 +0000 (10:00 -0700)
commit56e4562bb32d8a47485a9b8b868cb28fda595170
tree2ced5a9c38f85bb28060192933907b0cb47ac010
parent002d4127ed4f52323b0dc6573df907a5c2c7cef0
audit: don't free_chunk() after fsnotify_add_mark()

commit 0fe33aae0e94b4097dd433c9399e16e17d638cd8 upstream.

Don't do free_chunk() after fsnotify_add_mark().  That one does a delayed unref
via the destroy list and this results in use-after-free.

Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
Acked-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
kernel/audit_tree.c