From mboxrd@z Thu Jan 1 00:00:00 1970 From: Bart Van Assche Subject: Re: [PATCH 2/2] dm: Avoid use-after-free of a mapped device Date: Fri, 22 Feb 2013 12:22:09 +0100 Message-ID: <512754E1.9080008@acm.org> References: <51274C2F.6070500@acm.org> <51274CC3.9070204@acm.org> <20130222110829.GA30269@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20130222110829.GA30269@redhat.com> Sender: linux-scsi-owner@vger.kernel.org To: Mike Snitzer Cc: device-mapper development , linux-scsi , Alasdair G Kergon , Jens Axboe , Tejun Heo , James Bottomley List-Id: dm-devel.ids On 02/22/13 12:08, Mike Snitzer wrote: > On Fri, Feb 22 2013 at 5:47am -0500, > Bart Van Assche wrote: > >> As the comment above rq_completed() explains, md members must >> not be touched after the dm_put() at the end of that function >> has been invoked. Avoid that the md->queue can be run >> asynchronously after the last md reference has been dropped by >> running that queue synchronously. > > Your commit header should probably reference commit > a8c32a5c98943d370ea606a2e7dc04717eb92206 ("dm: fix deadlock with request > based dm and queue request_fn recursion") and cc: stable with "v3.7+" > guidance. > > Acked-by: Mike Snitzer Hello Mike, Thanks for reviewing this patch and for the ack. Regarding the stable tag: had you noticed that commit a8c32a5 had a "Cc: stable" tag itself and hence probably has already been backported to kernels older than v3.7 ? Bart.