https://github.com/torvalds/linux
Revision 46faeed4a61e220b99591e9773057160eb437cc8 authored by Alex Elder on 10 April 2013, 22:47:46 UTC, committed by Sage Weil on 17 April 2013, 18:39:09 UTC
It's possible that the reference to the object request dropped
inside the loop in rbd_img_request_submit() will be the last
one, in which case the content of the object pointer can't be
trusted.

Use a safe form of the object request list traversal to avoid
problems.

This resolves:
    http://tracker.ceph.com/issues/4705

Signed-off-by: Alex Elder <elder@inktank.com>
Reviewed-by: Josh Durgin <josh.durgin@inktank.com>
1 parent 6e2a450
History
Tip revision: 46faeed4a61e220b99591e9773057160eb437cc8 authored by Alex Elder on 10 April 2013, 22:47:46 UTC
rbd: do a safe list traversal in rbd_img_request_submit()
Tip revision: 46faeed
File Mode Size
apparmor
integrity
keys
selinux
smack
tomoyo
yama
Kconfig -rw-r--r-- 5.7 KB
Makefile -rw-r--r-- 1.0 KB
capability.c -rw-r--r-- 23.8 KB
commoncap.c -rw-r--r-- 28.1 KB
device_cgroup.c -rw-r--r-- 14.8 KB
inode.c -rw-r--r-- 6.7 KB
lsm_audit.c -rw-r--r-- 9.3 KB
min_addr.c -rw-r--r-- 1.3 KB
security.c -rw-r--r-- 35.1 KB

back to top