| commit | 2037a0933bc2894a2f50ae57a1ccf6be192adb76 | [log] [tgz] |
|---|---|---|
| author | Sasha Levin <sasha.levin@oracle.com> | Tue May 12 19:31:37 2015 -0400 |
| committer | Chris Mason <clm@fb.com> | Tue Jun 02 19:34:36 2015 -0700 |
| tree | 717aee3ea647947a67f0b9afa83ccb161398eb30 | |
| parent | 01b810b889d557257580970e1a7ba9c85b54766b [diff] |
btrfs: use after free when closing devices __btrfs_close_devices() would call_rcu to free the device, which is racy with list_for_each_entry() accessing the memory to retrieve the next device on the list. Signed-off-by: Sasha Levin <sasha.levin@oracle.com> Reviewed-by: David Sterba <dsterba@suse.cz> Signed-off-by: Chris Mason <clm@fb.com>