diff options
| author | Mike Krinkin <[email protected]> | 2015-07-19 06:53:17 +0000 |
|---|---|---|
| committer | Jens Axboe <[email protected]> | 2015-07-22 19:30:20 +0000 |
| commit | 21974061cfb3c4b0b1a83447fb5e7cdcd06e56dc (patch) | |
| tree | 558b1e88e86088c9500ffecb7d873c9dc0898c7d /net/switchdev/switchdev.c | |
| parent | Revert "fsnotify: fix oops in fsnotify_clear_marks_by_group_flags()" (diff) | |
| download | kernel-21974061cfb3c4b0b1a83447fb5e7cdcd06e56dc.tar.gz kernel-21974061cfb3c4b0b1a83447fb5e7cdcd06e56dc.zip | |
null_blk: fix use-after-free problem
end_cmd finishes request associated with nullb_cmd struct, so we
should save pointer to request_queue in a local variable before
calling end_cmd.
The problem was causes general protection fault with slab poisoning
enabled.
Fixes: 8b70f45e2eb2 ("null_blk: restart request processing on completion handler")
Tested-by: Akinobu Mita <[email protected]>
Signed-off-by: Mike Krinkin <[email protected]>
Signed-off-by: Jens Axboe <[email protected]>
Diffstat (limited to 'net/switchdev/switchdev.c')
0 files changed, 0 insertions, 0 deletions