diff options
| author | Lachlan McIlroy <lachlan@sgi.com> | 2008-10-30 16:53:25 +1100 |
|---|---|---|
| committer | Lachlan McIlroy <lachlan@sgi.com> | 2008-10-30 16:53:25 +1100 |
| commit | a357a1215602f79182abdde27aaddc7166dbd709 (patch) | |
| tree | 21d082a0cd92181123acaef9e9c10e1051bbe9df /fs/lockd | |
| parent | 46039928c9abe466ed1bc0da20c2e596b1d41236 (diff) | |
| download | op-kernel-dev-a357a1215602f79182abdde27aaddc7166dbd709.zip op-kernel-dev-a357a1215602f79182abdde27aaddc7166dbd709.tar.gz | |
[XFS] Fix use-after-free with log and quotas
Destroying the quota stuff on unmount can access the log - ie
XFS_QM_DONE() ends up in xfs_dqunlock() which calls
xfs_trans_unlocked_item() and then xfs_log_move_tail(). By this time the
log has already been destroyed. Just move the cleanup of the quota code
earlier in xfs_unmountfs() before the call to xfs_log_unmount(). Moving
XFS_QM_DONE() up near XFS_QM_DQPURGEALL() seems like a good spot.
SGI-PV: 987086
SGI-Modid: xfs-linux-melb:xfs-kern:32148a
Signed-off-by: Lachlan McIlroy <lachlan@sgi.com>
Signed-off-by: Christoph Hellwig <hch@infradead.org>
Signed-off-by: Peter Leckie <pleckie@sgi.com>
Diffstat (limited to 'fs/lockd')
0 files changed, 0 insertions, 0 deletions
