| To: | Dave Chinner <david@xxxxxxxxxxxxx> |
|---|---|
| Subject: | Re: ***** SUSPECTED SPAM ***** [PATCH 50/50] xfs: use reference counts to free clean buffer items |
| From: | Ben Myers <bpm@xxxxxxx> |
| Date: | Thu, 15 Aug 2013 16:43:23 -0500 |
| Cc: | xfs@xxxxxxxxxxx |
| Delivered-to: | xfs@xxxxxxxxxxx |
| In-reply-to: | <1376304611-22994-51-git-send-email-david@xxxxxxxxxxxxx> |
| References: | <1376304611-22994-1-git-send-email-david@xxxxxxxxxxxxx> <1376304611-22994-51-git-send-email-david@xxxxxxxxxxxxx> |
| User-agent: | Mutt/1.5.20 (2009-06-14) |
On Mon, Aug 12, 2013 at 08:50:11PM +1000, Dave Chinner wrote: > From: Dave Chinner <dchinner@xxxxxxxxxx> > > When a transaction is cancelled and the buffer log item is clean in > the transaction, the buffer log item is unconditionally freed. If > the log item is in the AIL, however, this leads to a use after free > condition as the item still has other users. > > In this case, xfs_buf_item_relse() should only be called on clean > buffer items if the reference count has dropped to zero. This > ensures only the last user frees the item. > > Signed-off-by: Dave Chinner <dchinner@xxxxxxxxxx> Applied. |
| Previous by Date: | Re: [PATCH 48/49] xfs: Add read-only support for dirent filetype field, Ric Wheeler |
|---|---|
| Next by Date: | Re: page fault scalability (ext3, ext4, xfs), Andy Lutomirski |
| Previous by Thread: | Re: [PATCH 50/50] xfs: use reference counts to free clean buffer items, Dave Chinner |
| Next by Thread: | ***** SUSPECTED SPAM ***** [PATCH 10/50] xfs: sync minor header differences needed by userspace., Dave Chinner |
| Indexes: | [Date] [Thread] [Top] [All Lists] |