Commit 683be16e authored by Dan Carpenter's avatar Dan Carpenter Committed by Chris Mason

Btrfs: dereferencing freed memory

The original code dereferenced range on the next line.
Signed-off-by: default avatarDan Carpenter <error27@gmail.com>
Signed-off-by: default avatarChris Mason <chris.mason@oracle.com>
parent f3eae7e8
...@@ -1374,6 +1374,7 @@ static int btrfs_ioctl_defrag(struct file *file, void __user *argp) ...@@ -1374,6 +1374,7 @@ static int btrfs_ioctl_defrag(struct file *file, void __user *argp)
sizeof(*range))) { sizeof(*range))) {
ret = -EFAULT; ret = -EFAULT;
kfree(range); kfree(range);
goto out;
} }
/* compression requires us to start the IO */ /* compression requires us to start the IO */
if ((range->flags & BTRFS_DEFRAG_RANGE_COMPRESS)) { if ((range->flags & BTRFS_DEFRAG_RANGE_COMPRESS)) {
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment