fuse: convert fuse_conn.count from atomic_t to refcount_t
authorElena Reshetova <[email protected]>
Fri, 3 Mar 2017 09:04:05 +0000 (11:04 +0200)
committerMiklos Szeredi <[email protected]>
Tue, 18 Apr 2017 14:58:37 +0000 (16:58 +0200)
commit095fc40ace5ffccd306f39fdd1a40b4faa41b8a0
tree389961004529678f773dc359e78cf9614bce9ae0
parentec99f6d31f2590a4c0ff2dae8fb1fa27f0647a42
fuse: convert fuse_conn.count from atomic_t to refcount_t

refcount_t type and corresponding API should be
used instead of atomic_t when the variable is used as
a reference counter. This allows to avoid accidental
refcounter overflows that might lead to use-after-free
situations.

Signed-off-by: Elena Reshetova <[email protected]>
Signed-off-by: Hans Liljestrand <[email protected]>
Signed-off-by: Kees Cook <[email protected]>
Signed-off-by: David Windsor <[email protected]>
Signed-off-by: Miklos Szeredi <[email protected]>
fs/fuse/fuse_i.h
fs/fuse/inode.c