[PATCH] audit: fix use-after-free in audit_add_watch

Ronny Chevalier ronny.chevalier at hp.com
Mon Jun 18 18:54:29 UTC 2018


On 18/06/2018 20:35, Richard Guy Briggs wrote:
> 
> Nice catch.
> 
> This doesn't quite look right though.  What if audit_get_nd() fails?

Oh, yes, obviously. I don't know why I thought there was a goto instead of a return there.

> How about we put that audit_get_watch(watch) right before
> audit_find_parent()?
> 

Sure, I will send a V2.




More information about the Linux-audit mailing list