Jens Axboe 7ad58c0286 block: fix use-after-free bug in blk throttle code ... blk_throtl_exit() frees the throttle data hanging off the queue in blk_cleanup_queue(), but blk_put_queue() will indirectly dereference this data when calling blk_sync_queue() which in turns calls throtl_shutdown_timer_wq(). Fix this by moving the freeing of the throttle data to when the queue is truly being released, and post the call to blk_sync_queue(). Reported-by: Ingo Molnar <mingo@elte.hu> Tested-by: Ingo Molnar <mingo@elte.hu> Signed-off-by: Jens Axboe <jaxboe@fusionio.com>		2010-10-23 20:40:26 +02:00
..
blk-cgroup.c	Merge branch 'for-2.6.37/core' of git://git.kernel.dk/linux-2.6-block	2010-10-22 17:00:32 -07:00
blk-cgroup.h	blkio-throttle: limit max iops value to UINT_MAX	2010-10-01 21:16:41 +02:00
blk-core.c	block: fix use-after-free bug in blk throttle code	2010-10-23 20:40:26 +02:00
blk-exec.c	block: Prevent hang_check firing during long I/O	2010-09-24 15:52:09 +02:00
blk-flush.c	block: remove BLKDEV_IFL_WAIT	2010-09-16 20:52:58 +02:00
blk-integrity.c	block: Fix double free in blk_integrity_unregister	2010-10-15 15:49:18 +02:00
blk-ioc.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
blk-iopoll.c	tree-wide: fix assorted typos all over the place	2009-12-04 15:39:55 +01:00
blk-lib.c	block: remove BLKDEV_IFL_WAIT	2010-09-16 20:52:58 +02:00
blk-map.c	Merge branch 'for-2.6.37/core' of git://git.kernel.dk/linux-2.6-block	2010-10-22 17:00:32 -07:00
blk-merge.c	Merge branch 'for-2.6.37/core' of git://git.kernel.dk/linux-2.6-block	2010-10-22 17:00:32 -07:00
blk-settings.c	Merge branch 'for-2.6.37/barrier' of git://git.kernel.dk/linux-2.6-block	2010-10-22 17:07:18 -07:00
blk-softirq.c	generic-ipi: remove CSD_FLAG_WAIT	2009-02-25 14:13:44 +01:00
blk-sysfs.c	block: fix use-after-free bug in blk throttle code	2010-10-23 20:40:26 +02:00
blk-tag.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
blk-throttle.c	blkio-throttle: Fix possible multiplication overflow in iops calculations	2010-10-01 21:16:42 +02:00
blk-timeout.c	block: ensure jiffies wrap is handled correctly in blk_rq_timed_out_timer	2010-04-21 17:42:08 +02:00
blk.h	Merge branch 'for-2.6.37/barrier' of git://git.kernel.dk/linux-2.6-block	2010-10-22 17:07:18 -07:00
bsg.c	Merge branch 'llseek' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/bkl	2010-10-22 10:52:56 -07:00
cfq-iosched.c	Merge branch 'for-2.6.37/core' of git://git.kernel.dk/linux-2.6-block	2010-10-22 17:00:32 -07:00
cfq.h	blk-cgroup: Prepare the base for supporting more than one IO control policies	2010-09-16 08:42:04 +02:00
compat_ioctl.c	block: add secure discard	2010-08-12 08:43:30 -07:00
deadline-iosched.c	block: convert to pos and nr_sectors accessors	2009-05-11 09:50:54 +02:00
elevator.c	Merge branch 'v2.6.36-rc8' into for-2.6.37/barrier	2010-10-19 09:13:04 +02:00
genhd.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core-2.6	2010-10-22 19:36:42 -07:00
ioctl.c	Merge branch 'for-2.6.37/barrier' of git://git.kernel.dk/linux-2.6-block	2010-10-22 17:07:18 -07:00
Kconfig	blkio: Core implementation of throttle policy	2010-09-16 08:42:52 +02:00
Kconfig.iosched	blk-cgroup: config options re-arrangement	2010-04-26 19:27:56 +02:00
Makefile	Merge branch 'for-2.6.37/barrier' of git://git.kernel.dk/linux-2.6-block	2010-10-22 17:07:18 -07:00
noop-iosched.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
scsi_ioctl.c	block/scsi_ioctl.c: quiet sparse noise	2009-11-04 09:10:33 +01:00