forked from luck/tmp_suning_uos_patched
Btrfs: don't delete fs_roots until after we cleanup the transaction
We get a use after free if we had a transaction to cleanup since there could be delayed inodes which refer to their respective fs_root. Thanks Reported-by: David Sterba <dsterba@suse.cz> Signed-off-by: Josef Bacik <jbacik@fusionio.com> Signed-off-by: Chris Mason <chris.mason@fusionio.com>
This commit is contained in:
parent
c5cb6a0573
commit
7b5ff90ed0
|
@ -2859,8 +2859,8 @@ int open_ctree(struct super_block *sb,
|
|||
btrfs_free_qgroup_config(fs_info);
|
||||
fail_trans_kthread:
|
||||
kthread_stop(fs_info->transaction_kthread);
|
||||
del_fs_roots(fs_info);
|
||||
btrfs_cleanup_transaction(fs_info->tree_root);
|
||||
del_fs_roots(fs_info);
|
||||
fail_cleaner:
|
||||
kthread_stop(fs_info->cleaner_kthread);
|
||||
|
||||
|
|
Loading…
Reference in New Issue
Block a user