diff options
| author | Bob Peterson <[email protected]> | 2021-02-25 16:11:09 +0000 |
|---|---|---|
| committer | Andreas Gruenbacher <[email protected]> | 2021-03-07 16:04:55 +0000 |
| commit | 1a5a2cfd34c17db73c53ef127272c8c1ae220485 (patch) | |
| tree | 2239078721418ae2c4ec7acca720e9ec44326c9c /lib/xarray.c | |
| parent | gfs2: make function gfs2_make_fs_ro() to void type (diff) | |
| download | kernel-1a5a2cfd34c17db73c53ef127272c8c1ae220485.tar.gz kernel-1a5a2cfd34c17db73c53ef127272c8c1ae220485.zip | |
gfs2: fix use-after-free in trans_drain
This patch adds code to function trans_drain to remove drained
bd elements from the ail lists, if queued, before freeing the bd.
If we don't remove the bd from the ail, function ail_drain will
try to reference the bd after it has been freed by trans_drain.
Thanks to Andy Price for his analysis of the problem.
Reported-by: Andy Price <[email protected]>
Signed-off-by: Bob Peterson <[email protected]>
Signed-off-by: Andreas Gruenbacher <[email protected]>
Diffstat (limited to 'lib/xarray.c')
0 files changed, 0 insertions, 0 deletions