Re: [PATCH] erofs-utils: lib: fix user-after-free in xattr.c

2024-12-02 Thread Sandeep Dhavale via Linux-erofs
Looks good to me. Reviewed-by: Sandeep Dhavale

[PATCH] erofs-utils: lib: fix user-after-free in xattr.c

2024-12-01 Thread Hongzhen Luo
Currently, put_xattritem() does not remove the `item` from the hash table after freeing it, which may lead to a user-after-free issue. This patch fixes it. Fixes: 47d6895a5ff9 ("erofs-utils: introduce inline xattr support") Signed-off-by: Hongzhen Luo --- lib/xattr.c | 1 + 1 file changed, 1 in