-----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEE9zuTYTs0RXF+Ke33EVvVyTe/1WoFAmrkiJ8ACgkQEVvVyTe/
1WqORg//XFzfWHcZWj9xutS0rNLnMHvvAa/aXO+7+V5/Dq6/12iQnKjzCRHIGDbj
Pyb/PY+foJuXrNu3kqM4xxtX77zB628px3KUlYXSS0FmwO1sRu6Q+NERsHUsAoaM
oFeWopsYODB+IsUR1saZylaAIhEV49fn4CWGLNZA+pqWQSIRgMXixJleacPWph5+
k4r/hmVbXc3BkBZdtpUdfgSsctowv402Y/qMYzY8wIDYcDA5d5hhT57mEEt2Y7KY
lQuArvn6wlx2Qds2vudYDajJjNJt3zpSNhc7omLlyP+0b+JA1F+xZQ3pWdUQZxus
FaO9L4rM1lfqA3TTKIpsoWE84YpfWguwpxZInYfMHwRnrRy59lhGxuOeslBWOXqe
skB/j+pkIpYc/Eq54GffC2NdNpeHa7LOqfJiWVZGeGMhGRLSyNpIYQWmbENBqDVz
GN/4ozM1bbeTmgdzVYt3WAcy+ZbeNSuLBfvY77At4qJYkJbv5oPXetMTW6XXiQal
EGnbLCY6TunIEGQIp+OLzZC5fpu+AwGFr+ZSXWt0bLnvpSm/pXjzYdM9fv2kFYCc
1kPXkvx0LkjIO0g6u4ejCLWDsRCaPd0QdVLnyEnwqi5fBOGBHCflbVAAy0PMqe/h
SZplOOwux/bknMtWNbuDER6Y8EjP3Fl36fdmLem49z4KJH0y1Uc=
=HGfC
-----END PGP SIGNATURE-----
Merge tag 'ovl-fixes-7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/overlayfs/vfs
Pull overlayfs fixes from Amir Goldstein:
- Fixes for bugs found by Chris Mason's AI review, several of them
reachable by unprivileged users: an info leak, use-after-free and
NULL deref bugs, an RCU walk stall with remote layers and data loss
with nfs_export
- Fix copy up of files with an empty security.capability xattr, which
any user could set to block copy up
- Fix a regression from v6.16 with the override_creds mount option
- Two casefold fixes
* tag 'ovl-fixes-7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/overlayfs/vfs:
ovl: check the casefold flag of directories only
ovl: reserve space for the casefolded name terminator
ovl: fix mount setup failing when override_creds drops CAP_SYS_ADMIN
selftests/ovl: fix detached layer mountinfo expectations
ovl: set the revalidate flags after d_instantiate()
ovl: always encode the origin fh when index is enabled
ovl: read the nlink xattr of every indexed non-dir
ovl: skip copy up of empty security.capability
ovl: fix a torn path in ovl_get_redirect()
ovl: do not copy up a dentry that was removed
ovl: hold a reference on the parent in readdir
ovl: use the pinned upper dir in ovl_fix_origin()
ovl: do not take a name snapshot in RCU walk
vfs: add try_take_dentry_name_snapshot()
ovl: take a snapshot of the name for copy up
ovl: check that the parents of volatile/dirty are dirs
ovl: add assertions in dir cache code
ovl: set OVL_WHITEOUTS before publishing the upper dir
ovl: fortify ovl_copy_xattr() against underlying layer modifications
ovl: do not copy up an xattr value that was never read
ca62fc8c6b