diff options
author | Bob Peterson <rpeterso@redhat.com> | 2010-06-17 16:45:37 -0400 |
---|---|---|
committer | Steven Whitehouse <swhiteho@redhat.com> | 2010-07-15 09:06:25 +0100 |
commit | b1becbdee776b447f203aa8da9a40488d5a75e1d (patch) | |
tree | 1bf927adf4bf63cc39961cad2476774ab88b47ee /net/ipv4/tcp_scalable.c | |
parent | b7dc2df5725fe7355fd76000ead7e39728e1b8a9 (diff) | |
download | blackbird-op-linux-b1becbdee776b447f203aa8da9a40488d5a75e1d.tar.gz blackbird-op-linux-b1becbdee776b447f203aa8da9a40488d5a75e1d.zip |
GFS2: Fix kernel NULL pointer dereference by dlm_astd
This patch fixes a problem in an error path when looking
up dinodes. There are two sister-functions, gfs2_inode_lookup
and gfs2_process_unlinked_inode. Both functions acquire and
hold the i_iopen glock for the dinode being looked up. The last
thing they try to do is hold the i_gl glock for the dinode.
If that glock fails for some reason, the error path was
incorrectly calling gfs2_glock_put for the i_iopen glock twice.
This resulted in the glock being prematurely freed. The
"minimum hold time" usually kept the glock in memory, but the
lock interface to dlm (aka lock_dlm) freed its memory for the
glock. In some circumstances, it would cause dlm's dlm_astd daemon
to try to call the bast function for the freed lock_dlm memory,
which resulted in a NULL pointer dereference.
Signed-off-by: Bob Peterson <rpeterso@redhat.com>
Signed-off-by: Steven Whitehouse <swhiteho@redhat.com>
Diffstat (limited to 'net/ipv4/tcp_scalable.c')
0 files changed, 0 insertions, 0 deletions