From: Al Viro Date: Tue, 22 Nov 2011 17:31:21 +0000 (-0500) Subject: mount_subtree() pointless use-after-free X-Git-Tag: v3.2-rc3~10^2 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d31da0f0ba3bc0a827a63879310818c22d9a95be;p=pandora-kernel.git mount_subtree() pointless use-after-free d'oh... we'd carefully pinned mnt->mnt_sb down, dropped mnt and attempt to grab s_umount on mnt->mnt_sb. The trouble is, *mnt might've been overwritten by now... Signed-off-by: Al Viro --- Reading git-diff-tree failed