From: NeilBrown Date: Thu, 25 Jun 2015 07:01:40 +0000 (+1000) Subject: md: clear mddev->private when it has been freed. X-Git-Tag: omap-for-v4.2/fixes-rc1^2~71^2~2 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bd6919228d7e1867ae9e24ab27e3e4a366c87d21;p=pandora-kernel.git md: clear mddev->private when it has been freed. If ->private is set when ->run is called, it is assumed to be a 'config' prepared as part of 'reshape'. So it is important when we free that config, that we also clear ->private. This is not often a problem as the mddev will normally be discarded shortly after the config us freed. However if an 'assemble' races with a final close, the assemble can use the old mddev which has a stale ->private. This leads to any of various sorts of crashes. So clear ->private after calling ->free(). Reported-by: Nate Clark Cc: stable@vger.kernel.org (v4.0+) Fixes: afa0f557cb15 ("md: rename ->stop to ->free") Signed-off-by: NeilBrown --- Reading git-diff-tree failed