securityfs: fix use-after-free on symlink traversal
authorAl Viro <viro@zeniv.linux.org.uk>
Wed, 10 Apr 2019 18:03:45 +0000 (14:03 -0400)
committerAl Viro <viro@zeniv.linux.org.uk>
Wed, 10 Apr 2019 18:03:45 +0000 (14:03 -0400)
commit46c874419652bbefdfed17420fd6e88d8a31d9ec
tree9dc4a5c095b24ac15b73ab85c8f5542df63eec83
parent6af1c849dfb1f1d326fbdd157c9bc882b921f450
securityfs: fix use-after-free on symlink traversal

symlink body shouldn't be freed without an RCU delay.  Switch securityfs
to ->destroy_inode() and use of call_rcu(); free both the inode and symlink
body in the callback.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
security/inode.c