]> git.baikalelectronics.ru Git - kernel.git/commit
btrfs: use after free when closing devices
authorSasha Levin <sasha.levin@oracle.com>
Tue, 12 May 2015 23:31:37 +0000 (19:31 -0400)
committerChris Mason <clm@fb.com>
Wed, 3 Jun 2015 02:34:36 +0000 (19:34 -0700)
commit7b570511e4392521ca7cacdb43f22d229bfc0aed
tree717aee3ea647947a67f0b9afa83ccb161398eb30
parent8155f376b66750a92fc02eba45ba5e7bf4dcac10
btrfs: use after free when closing devices

__btrfs_close_devices() would call_rcu to free the device, which is racy with
list_for_each_entry() accessing the memory to retrieve the next device on the
list.

Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
Reviewed-by: David Sterba <dsterba@suse.cz>
Signed-off-by: Chris Mason <clm@fb.com>
fs/btrfs/volumes.c