ext4: fix possible use-after-free with AIO
authorJan Kara <jack@suse.cz>
Wed, 30 Jan 2013 03:48:17 +0000 (22:48 -0500)
committerTheodore Ts'o <tytso@mit.edu>
Wed, 30 Jan 2013 03:48:17 +0000 (22:48 -0500)
commit091e26dfc156aeb3b73bc5c5f277e433ad39331c
tree03a95cea66597c0b7289ea6fbdc13785a5e21919
parentb1deefc99e668348f7c785c6ece5f6ff4c6d8b5c
ext4: fix possible use-after-free with AIO

Running AIO is pinning inode in memory using file reference. Once AIO
is completed using aio_complete(), file reference is put and inode can
be freed from memory. So we have to be sure that calling aio_complete()
is the last thing we do with the inode.

CC: stable@vger.kernel.org
Reviewed-by: Carlos Maiolino <cmaiolino@redhat.com>
Acked-by: Jeff Moyer <jmoyer@redhat.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
fs/ext4/inode.c
fs/ext4/page-io.c