xfs: Fix possible use-after-free with AIO
authorJan Kara <jack@suse.cz>
Wed, 23 Jan 2013 12:56:18 +0000 (13:56 +0100)
committerBen Myers <bpm@sgi.com>
Sat, 26 Jan 2013 15:43:58 +0000 (09:43 -0600)
commitced55f38d6bde7c10a14ea51c2edcd51a98575e3
tree74840a0c20cb2397046631a79fa0be72abe3ca77
parent3b19034d4f4554e39ca244fb28962bbf2ccba046
xfs: Fix possible use-after-free with AIO

Running AIO is pinning inode in memory using file reference. Once AIO
is completed using aio_complete(), file reference is put and inode can
be freed from memory. So we have to be sure that calling aio_complete()
is the last thing we do with the inode.

CC: xfs@oss.sgi.com
CC: Ben Myers <bpm@sgi.com>
CC: stable@vger.kernel.org
Signed-off-by: Jan Kara <jack@suse.cz>
Reviewed-by: Ben Myers <bpm@sgi.com>
Signed-off-by: Ben Myers <bpm@sgi.com>
fs/xfs/xfs_aops.c