| tag | 54688baf2e55c06bd1e6926dfb07b35ad3425662 | |
|---|---|---|
| tagger | Jens Axboe <axboe@kernel.dk> | Sun Jun 10 10:30:41 2018 -0600 |
| object | 190b02ed79e08983bf62d47c05945c1b06a3d7d5 |
for-linus-20180610
| commit | 190b02ed79e08983bf62d47c05945c1b06a3d7d5 | [log] [tgz] |
|---|---|---|
| author | Jens Axboe <axboe@kernel.dk> | Sat Jun 09 06:37:14 2018 -0600 |
| committer | Jens Axboe <axboe@kernel.dk> | Sat Jun 09 06:37:14 2018 -0600 |
| tree | 7b1d6db69efaf3ccb7d888d7cdfa1ccb59798178 | |
| parent | 77016199f11eacd7b23e2faeb4d0f36166e3530b [diff] |
block: fix use-after-free in block flush handling
A recent commit reused the original request flags for the flush
queue handling. However, for some of the kick flush cases, the
original request was already completed. This caused a use after
free, if blk-mq wasn't used.
Fixes: 84fca1b0c461 ("block: pass failfast and driver-specific flags to flush requests")
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>