Bug #4705
rbd: do a safe list traversal in rbd_img_request_submit()
% Done:
0%
Source:
Development
Tags:
Backport:
Yes?
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
It's possible that the reference to the object request dropped
inside the loop in rbd_img_request_submit() will be the last
one, in which case the content of the object pointer can't be
trusted.
Use a safe form of the object request list traversal to avoid
problems.
Signed-off-by: Alex Elder <elder@inktank.com>
History
#1 Updated by Alex Elder almost 10 years ago
- Status changed from In Progress to Fix Under Review
The following has been posted for review:
[PATCH] rbd: do a safe list traversal in rbd_img_request_submit()
#2 Updated by Alex Elder almost 10 years ago
- Backport set to Yes?
I don't know how to fill in the "Backport" field. But this
may be a bug we should send to Linus for the current
cycle (3.9-rc7 is scheduled this weekend I think).
#3 Updated by Alex Elder almost 10 years ago
- Status changed from Fix Under Review to Resolved
Sage sent a pull request for this patch today and Linus
accepted it already for Linux 3.9.
46faeed rbd: do a safe list traversal in rbd_img_request_submit()
#4 Updated by Alex Elder almost 10 years ago
- Target version set to v0.62a