diff options
| author | Shaohua Li | 2015-09-02 13:49:47 -0700 |
|---|---|---|
| committer | NeilBrown | 2015-11-01 13:48:26 +1100 |
| commit | 0fd22b45b2d2e1de162d6a47327d449e0ed45ad2 (patch) | |
| tree | 19405695d4fee2c0d07ede5af8d95e54952c459b /drivers/crypto/caam | |
| parent | a8c34f915976e3de044cc31b8bcb46f816f5a52e (diff) | |
raid5-cache: fix a user-after-free bug
r5l_compress_stripe_end_list() can free an io_unit. This breaks the
assumption only reclaimer can free io_unit. We can add a reference count
based io_unit free, but since only reclaim can wait io_unit becoming to
STRIPE_END state, we use a simple global wait queue here.
Signed-off-by: Shaohua Li <shli@fb.com>
Signed-off-by: NeilBrown <neilb@suse.com>
Diffstat (limited to 'drivers/crypto/caam')
0 files changed, 0 insertions, 0 deletions