Google Git
Sign in
kernel / pub / scm / linux / kernel / git / axboe / fio / 5ba01402d96e113ac451441f45d0c8b4dd281f4d
commit5ba01402d96e113ac451441f45d0c8b4dd281f4d[log] [tgz]
authorJens Axboe <axboe@fb.com>Mon Apr 03 08:46:34 2017 -0600
committerJens Axboe <axboe@fb.com>Mon Apr 03 08:46:34 2017 -0600
tree50a02e6811eebe323fd661e365536d2535ae0eb9
parent249ad5bfaded90c0431041b4a3816e7371c2d403 [diff]
backend: move freeing of td->mutex to main thread

On some platforms, we can end up freeing td->mutex while the wakee
is still inside fio_mutex_up(). This introduces a use-after-free
condition, and we crash.

Free the main thread_data mutex from the main thread instead,
when we know the process/thread is long dead and gone.

Signed-off-by: Jens Axboe <axboe@fb.com>
1 file changed
tree: 50a02e6811eebe323fd661e365536d2535ae0eb9
  1. arch/
  2. compiler/
  3. crc/
  4. doc/
  5. engines/
  6. examples/
  7. exp/
  8. lib/
  9. os/
  10. oslib/
  11. profiles/
  12. t/
  13. tools/
  14. unit_tests/
  15. .gitignore
  16. .travis.yml
  17. appveyor.yml
  18. backend.c
  19. blktrace.c
  20. blktrace_api.h
  21. cairo_text_helpers.c
  22. cairo_text_helpers.h
  23. cconv.c
  24. cgroup.c
  25. cgroup.h
  26. client.c
  27. client.h
  28. configure
  29. COPYING
  30. debug.c
  31. debug.h
  32. diskutil.c
  33. diskutil.h
  34. err.h
  35. eta.c
  36. fifo.c
  37. fifo.h
  38. file.h
  39. filehash.c
  40. filehash.h
  41. filelock.c
  42. filelock.h
  43. filesetup.c
  44. FIO-VERSION-GEN
  45. fio.1
  46. fio.c
  47. fio.h
  48. fio_time.h
  49. flist.h
  50. flow.c
  51. flow.h
  52. gclient.c
  53. gclient.h
  54. gcompat.c
  55. gcompat.h
  56. gerror.c
  57. gerror.h
  58. gettime-thread.c
  59. gettime.c
  60. gettime.h
  61. GFIO-TODO
  62. gfio.c
  63. gfio.h
  64. ghelpers.c
  65. ghelpers.h
  66. goptions.c
  67. goptions.h
  68. graph.c
  69. graph.h
  70. hash.h
  71. helper_thread.c
  72. helper_thread.h
  73. helpers.c
  74. helpers.h
  75. HOWTO
  76. idletime.c
  77. idletime.h
  78. init.c
  79. io_ddir.h
  80. io_u.c
  81. io_u.h
  82. io_u_queue.c
  83. io_u_queue.h
  84. ioengines.c
  85. ioengines.h
  86. iolog.c
  87. iolog.h
  88. json.c
  89. json.h
  90. libfio.c
  91. log.c
  92. log.h
  93. Makefile
  94. memory.c
  95. minmax.h
  96. MORAL-LICENSE
  97. mutex.c
  98. mutex.h
  99. optgroup.c
  100. optgroup.h
  101. options.c
  102. options.h
  103. parse.c
  104. parse.h
  105. printing.c
  106. printing.h
  107. profile.c
  108. profile.h
  109. rate-submit.c
  110. rate-submit.h
  111. README
  112. REPORTING-BUGS
  113. SERVER-TODO
  114. server.c
  115. server.h
  116. smalloc.c
  117. smalloc.h
  118. stat.c
  119. stat.h
  120. STEADYSTATE-TODO
  121. steadystate.c
  122. steadystate.h
  123. td_error.c
  124. td_error.h
  125. thread_options.h
  126. tickmarks.c
  127. tickmarks.h
  128. time.c
  129. trim.c
  130. trim.h
  131. verify-state.h
  132. verify.c
  133. verify.h
  134. workqueue.c
  135. workqueue.h