projects / firefly-linux-kernel-4.4.55.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a8c34f9) | patch
raid5-cache: fix a user-after-free bug
authorShaohua Li <shli@fb.com>
Wed, 2 Sep 2015 20:49:47 +0000 (13:49 -0700)
committerNeilBrown <neilb@suse.com>
Sun, 1 Nov 2015 02:48:26 +0000 (13:48 +1100)
commit0fd22b45b2d2e1de162d6a47327d449e0ed45ad2
tree19405695d4fee2c0d07ede5af8d95e54952c459btree | snapshot
parenta8c34f915976e3de044cc31b8bcb46f816f5a52ecommit | diff
raid5-cache: fix a user-after-free bug

r5l_compress_stripe_end_list() can free an io_unit. This breaks the
assumption only reclaimer can free io_unit. We can add a reference count
based io_unit free, but since only reclaim can wait io_unit becoming to
STRIPE_END state, we use a simple global wait queue here.

Signed-off-by: Shaohua Li <shli@fb.com>
Signed-off-by: NeilBrown <neilb@suse.com>
drivers/md/raid5-cache.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.