TAKE 964545 - use-after-free of xfs_buf

To:	xfs@xxxxxxxxxxx, sgi.bugs.xfs@xxxxxxxxxxxx
Subject:	TAKE 964545 - use-after-free of xfs_buf_t during log unmount
From:	dgc@xxxxxxx (David Chinner)
Date:	Fri, 11 May 2007 15:25:20 +1000 (EST)
Sender:	xfs-bounce@xxxxxxxxxxx

Fix use-after-free during log unmount.

Don't reference the log buffer after running the callbacks as
the callback can trigger the log buffers to be freed during
unmount.


Date:  Fri May 11 15:24:46 AEST 2007
Workarea:  chook.melbourne.sgi.com:/build/dgc/isms/2.6.x-xfs
Inspected by:  hch@xxxxxxxxxxxxx

The following file(s) were checked into:
  longdrop.melbourne.sgi.com:/isms/linux/2.6.x-xfs-melb


Modid:  xfs-linux-melb:xfs-kern:28567a
fs/xfs/xfs_log.c - 1.329 - changed
http://oss.sgi.com/cgi-bin/cvsweb.cgi/xfs-linux/xfs_log.c.diff?r1=text&tr1=1.329&r2=text&tr2=1.328&f=h
        - Don't reference the log buffer after running the callbacks
          as it may have been freed during the unmount.

<Prev in Thread]	Current Thread	[Next in Thread>
TAKE 964545 - use-after-free of xfs_buf_t during log unmount, David Chinner <=

Previous by Date:	TAKE 963674 - Don't hold ilock when calling vn_iowait., David Chinner
Next by Date:	TAKE 964544 - Barriers need to be dynamically checked and switched off, David Chinner
Previous by Thread:	TAKE 963674 - Don't hold ilock when calling vn_iowait., David Chinner
Next by Thread:	TAKE 964544 - Barriers need to be dynamically checked and switched off, David Chinner
Indexes:	[Date] [Thread] [Top] [All Lists]

TAKE 964545 - use-after-free of xfs_buf_t during log unmount