Jens Axboe 7ad58c0286 block: fix use-after-free bug in blk throttle code ... blk_throtl_exit() frees the throttle data hanging off the queue in blk_cleanup_queue(), but blk_put_queue() will indirectly dereference this data when calling blk_sync_queue() which in turns calls throtl_shutdown_timer_wq(). Fix this by moving the freeing of the throttle data to when the queue is truly being released, and post the call to blk_sync_queue(). Reported-by: Ingo Molnar <mingo@elte.hu> Tested-by: Ingo Molnar <mingo@elte.hu> Signed-off-by: Jens Axboe <jaxboe@fusionio.com>		2010-10-23 20:40:26 +02:00
..
blk-cgroup.c
blk-cgroup.h
blk-core.c	block: fix use-after-free bug in blk throttle code	2010-10-23 20:40:26 +02:00
blk-exec.c
blk-flush.c
blk-integrity.c
blk-ioc.c
blk-iopoll.c
blk-lib.c
blk-map.c
blk-merge.c
blk-settings.c	Merge branch 'for-2.6.37/barrier' of git://git.kernel.dk/linux-2.6-block	2010-10-22 17:07:18 -07:00
blk-softirq.c
blk-sysfs.c	block: fix use-after-free bug in blk throttle code	2010-10-23 20:40:26 +02:00
blk-tag.c
blk-throttle.c
blk-timeout.c
blk.h	Merge branch 'for-2.6.37/barrier' of git://git.kernel.dk/linux-2.6-block	2010-10-22 17:07:18 -07:00
bsg.c
cfq-iosched.c
cfq.h
compat_ioctl.c
deadline-iosched.c
elevator.c
genhd.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core-2.6	2010-10-22 19:36:42 -07:00
ioctl.c	Merge branch 'for-2.6.37/barrier' of git://git.kernel.dk/linux-2.6-block	2010-10-22 17:07:18 -07:00
Kconfig
Kconfig.iosched
Makefile	Merge branch 'for-2.6.37/barrier' of git://git.kernel.dk/linux-2.6-block	2010-10-22 17:07:18 -07:00
noop-iosched.c
scsi_ioctl.c