diff options
| author | Christoph Hellwig <hch@infradead.org> | 2011-09-13 22:26:00 (GMT) |
|---|---|---|
| committer | Alex Elder <aelder@sgi.com> | 2011-09-14 13:56:35 (GMT) |
| commit | 2d2422aebc037095f77551119f795449d29befed (patch) | |
| tree | 1786857f965cb63887c2bd7fd8dd08aabaefab4a /fs/pipe.c | |
| parent | 003f6c9df54970d8b19578d195b3e2b398cdbde2 (diff) | |
| download | linux-2d2422aebc037095f77551119f795449d29befed.tar.xz | |
xfs: fix a use after free in xfs_end_io_direct_write
There is a window in which the ioend that we call inode_dio_wake on
in xfs_end_io_direct_write is already free. Fix this by storing
the inode pointer in a local variable.
This is a fix for the regression introduced in 3.1-rc by
"fs: move inode_dio_done to the end_io handler".
Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Alex Elder <aelder@sgi.com>
Diffstat (limited to 'fs/pipe.c')
0 files changed, 0 insertions, 0 deletions