From: Jan Kara Date: Tue, 29 Jan 2013 23:28:01 +0000 (+0100) Subject: fs: Fix possible use-after-free with AIO X-Git-Tag: v3.9-rc1~56^2~33 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=54c807e71d5ac59dee56c685f2b66e27cd54c475;p=pandora-kernel.git fs: Fix possible use-after-free with AIO Running AIO is pinning inode in memory using file reference. Once AIO is completed using aio_complete(), file reference is put and inode can be freed from memory. So we have to be sure that calling aio_complete() is the last thing we do with the inode. CC: Christoph Hellwig CC: Jens Axboe CC: Jeff Moyer CC: stable@vger.kernel.org Acked-by: Jeff Moyer Signed-off-by: Jan Kara Signed-off-by: Al Viro --- Reading git-diff-tree failed