diff options
author | Al Viro <[email protected]> | 2014-09-04 09:38:11 -0400 |
---|---|---|
committer | Jan Kara <[email protected]> | 2014-09-04 21:37:41 +0200 |
commit | b231509616feb911c2a7a8814d58c0014ef5b17f (patch) | |
tree | da9d231b09ee58637fb671310291432929c9db56 /net/lapb/lapb_iface.c | |
parent | d2be51cb34dc501791f3b8c01a99a3f2064bd8d1 (diff) |
udf: fix the udf_iget() vs. udf_new_inode() races
Currently udf_iget() (triggered by NFS) can race with udf_new_inode()
leading to two inode structures with the same inode number:
nfsd: iget_locked() creates inode
nfsd: try to read from disk, block on that.
udf_new_inode(): allocate inode with that inumber
udf_new_inode(): insert it into icache, set it up and dirty
udf_write_inode(): write inode into buffer cache
nfsd: get CPU again, look into buffer cache, see nice and sane on-disk
inode, set the in-core inode from it
Fix the problem by putting inode into icache in locked state (I_NEW set)
and unlocking it only after it's fully set up.
Signed-off-by: Al Viro <[email protected]>
Signed-off-by: Jan Kara <[email protected]>
Diffstat (limited to 'net/lapb/lapb_iface.c')
0 files changed, 0 insertions, 0 deletions