ksmbd: fix uaf in smb20_oplock_break_ack

drop reference after use opinfo. Signed-off-by: luosili <[email protected]> Signed-off-by: Namjae Jeon <[email protected]>
namjaejeon · Oct 4, 2023 · 2dc0dc4 · 2dc0dc4
1 parent 36eb997
commit 2dc0dc4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/smb2pdu.c b/smb2pdu.c
@@ -8661,10 +8661,10 @@ static void smb20_oplock_break_ack(struct ksmbd_work *work)
 		goto err_out;
 	}
 
-	opinfo_put(opinfo);
-	ksmbd_fd_put(work, fp);
 	opinfo->op_state = OPLOCK_STATE_NONE;
 	wake_up_interruptible_all(&opinfo->oplock_q);
+	opinfo_put(opinfo);
+	ksmbd_fd_put(work, fp);
 
 	rsp->StructureSize = cpu_to_le16(24);
 	rsp->OplockLevel = rsp_oplevel;