Jens Axboe
61febef40b
dm-rq: don't dereference request payload after ending request ...
Bart reported a case where dm would crash with use-after-free
poison. This is due to dm_softirq_done() accessing memory
associated with a request after calling end_request on it.
This is most visible on !blk-mq, since we free the memory
immediately for that case.
Reported-by: Bart Van Assche <bart.vanassche@sandisk.com>
Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
Fixes: eb8db831be80 ("dm: always defer request allocation to the owner of the request_queue")
Signed-off-by: Jens Axboe <axboe@fb.com>
2017-02-24 13:19:32 -07:00
2017-02-20 17:55:15 -08:00
2017-02-17 14:08:19 -07:00
2016-12-24 11:46:01 -08:00
2017-01-11 09:27:30 +01:00
2017-02-20 18:06:09 -08:00
2017-01-17 14:23:44 +02:00
2017-02-22 11:54:49 -07:00
2016-12-16 10:24:44 -08:00
2016-12-25 10:47:44 +01:00
2017-02-17 14:08:19 -07:00
2017-02-08 18:06:03 -08:00
2017-01-30 09:22:21 +01:00
2017-02-20 10:06:32 -08:00
2017-02-20 17:41:31 -08:00
2017-01-30 11:03:32 +01:00
2017-02-06 14:16:23 -08:00
2016-12-18 15:49:10 -08:00
2017-02-20 14:23:40 +01:00
2016-12-24 11:46:01 -08:00
2017-02-10 15:13:10 +01:00
2017-02-20 12:47:44 -08:00
2017-01-11 09:11:39 +01:00
2017-02-07 10:42:11 +01:00
2017-01-19 09:57:20 +01:00
2017-02-20 13:23:30 -08:00
2017-02-20 15:01:57 +01:00
2017-01-31 10:59:48 +01:00
2017-02-16 06:49:05 -08:00
2016-12-25 10:47:44 +01:00
2017-02-20 18:06:09 -08:00
2017-02-17 14:08:19 -07:00
2016-12-13 10:41:53 -08:00
2017-01-22 13:35:40 +00:00
2017-02-20 13:23:30 -08:00
2017-02-12 18:36:49 -08:00
2017-02-10 15:13:10 +01:00
2017-02-20 16:42:43 -08:00
2017-02-01 09:13:50 +01:00
2017-02-14 22:20:24 +01:00
2016-12-24 11:46:01 -08:00
2017-02-15 08:27:21 -07:00
2017-02-01 09:13:47 +01:00
2016-12-25 17:21:22 +01:00
2017-02-24 13:19:32 -07:00
2017-02-16 10:22:41 -08:00
2017-02-17 14:08:19 -07:00
2017-01-27 15:08:35 -07:00
2017-01-03 17:34:16 +00:00
2017-02-20 13:23:30 -08:00
2017-02-17 14:08:19 -07:00
2017-02-21 10:57:33 -08:00
2017-02-17 15:32:06 -05:00
2017-02-16 23:11:26 -05:00
2016-12-24 11:46:01 -08:00
2017-02-04 14:47:31 -08:00
2017-02-23 11:55:43 -07:00
2017-01-04 18:22:47 +01:00
2016-12-15 12:46:48 -08:00
2016-12-24 11:46:01 -08:00
2016-12-24 11:46:01 -08:00
2017-01-28 21:54:21 +01:00
2017-02-20 13:23:30 -08:00
2016-12-12 18:55:06 -08:00
2016-12-25 10:47:44 +01:00
2016-12-14 10:49:33 -08:00
2017-01-30 15:53:57 +01:00
2017-02-20 16:26:57 -08:00
2016-12-24 11:46:01 -08:00
2017-01-29 23:15:18 +01:00
2016-12-12 19:56:15 -08:00
2016-12-15 11:45:13 -08:00
2017-02-20 17:23:57 -08:00
2016-12-30 03:26:31 -08:00
2017-02-17 08:11:47 +01:00
2016-12-30 03:12:11 -08:00
2017-01-26 23:03:21 +01:00
2017-02-17 14:08:19 -07:00
2016-12-24 11:46:01 -08:00
2017-02-21 14:18:54 -07:00
2016-12-12 18:55:08 -08:00
2017-01-12 13:37:49 -08:00
2017-02-20 17:55:15 -08:00
2017-02-20 13:23:30 -08:00
2017-02-21 10:57:33 -08:00
2017-02-20 14:22:50 +01:00
2016-12-13 12:11:01 -08:00
2017-02-20 13:23:30 -08:00
2017-02-20 13:23:30 -08:00
2017-02-20 16:42:43 -08:00
2017-02-03 23:38:57 +02:00
2017-01-24 16:26:14 -08:00
2017-02-03 23:38:50 +02:00
2017-01-11 10:42:16 +01:00
2016-12-24 11:27:45 -08:00
2017-01-27 12:17:07 -08:00
2016-12-24 11:46:01 -08:00
61febef40b