Omar Sandoval 60c7663ac6 btrfs: don't prematurely free work in scrub_missing_raid56_worker() ... [ Upstream commit 57d4f0b863 ] Currently, scrub_missing_raid56_worker() puts and potentially frees sblock (which embeds the work item) and then submits a bio through scrub_wr_submit(). This is another potential instance of the bug in "btrfs: don't prematurely free work in run_ordered_work()". Fix it by dropping the reference after we submit the bio. Reviewed-by: Johannes Thumshirn <jthumshirn@suse.de> Signed-off-by: Omar Sandoval <osandov@fb.com> Reviewed-by: David Sterba <dsterba@suse.com> Signed-off-by: David Sterba <dsterba@suse.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2019-12-31 16:45:50 +01:00
..
tests	btrfs: return error pointer from alloc_test_extent_buffer	2019-12-31 16:41:57 +01:00
Kconfig	btrfs: Fix build error while LIBCRC32C is module	2019-07-17 17:03:30 +02:00
Makefile	btrfs: migrate the block group lookup code	2019-09-09 14:59:04 +02:00
acl.c	btrfs: cleanup btrfs_setxattr_trans and drop transaction parameter	2019-04-29 19:02:44 +02:00
async-thread.c	btrfs: don't prematurely free work in run_ordered_work()	2019-12-31 16:45:36 +01:00
async-thread.h	btrfs: replace GPL boilerplate by SPDX -- headers	2018-04-12 16:29:46 +02:00
backref.c	Btrfs: fix deadlock between fiemap and transaction commits	2019-07-30 18:25:12 +02:00
backref.h	btrfs: fiemap: preallocate ulists for btrfs_check_shared	2019-07-01 13:34:53 +02:00
block-group.c	btrfs: use btrfs_block_group_cache_done in update_block_group	2019-12-17 19:56:02 +01:00
block-group.h	btrfs: move struct io_ctl to free-space-cache.h	2019-09-09 14:59:15 +02:00
block-rsv.c	btrfs: use btrfs_try_granting_tickets in update_global_rsv	2019-09-09 14:59:19 +02:00
block-rsv.h	btrfs: migrate the global_block_rsv helpers to block-rsv.c	2019-07-02 12:30:55 +02:00
btrfs_inode.h	btrfs: remove assumption about csum type form btrfs_print_data_csum_error()	2019-07-01 13:35:02 +02:00
check-integrity.c	btrfs: reduce stack usage for btrfsic_process_written_block	2019-09-09 14:58:58 +02:00
check-integrity.h	btrfs: replace GPL boilerplate by SPDX -- headers	2018-04-12 16:29:46 +02:00
compression.c	btrfs: move cond_wake_up functions out of ctree	2019-09-09 14:59:15 +02:00
compression.h	btrfs: compression: replace set_level callbacks by a common helper	2019-09-09 14:59:11 +02:00
ctree.c	Btrfs: fix removal logic of the tree mod log that leads to use-after-free issues	2019-12-31 16:42:07 +01:00
ctree.h	Btrfs: fix missing data checksums after replaying a log tree	2019-12-31 16:41:58 +01:00
delalloc-space.c	Btrfs: fix qgroup double free after failure to reserve metadata for delalloc	2019-10-17 20:13:44 +02:00
delalloc-space.h	btrfs: migrate the delalloc space stuff to it's own home	2019-07-04 17:26:17 +02:00
delayed-inode.c	btrfs: use refcount_inc_not_zero in kill_all_nodes	2019-12-17 19:56:03 +01:00
delayed-inode.h	Btrfs: delayed-inode: use rb_first_cached for ins_root and del_root	2018-10-15 17:23:33 +02:00
delayed-ref.c	btrfs: rename btrfs_space_info_add_old_bytes	2019-09-09 14:59:18 +02:00
delayed-ref.h	btrfs: migrate the delayed refs rsv code	2019-07-04 17:26:17 +02:00
dev-replace.c	btrfs: move cond_wake_up functions out of ctree	2019-09-09 14:59:15 +02:00
dev-replace.h	btrfs: get fs_info from trans in btrfs_run_dev_replace	2019-04-29 19:02:43 +02:00
dir-item.c	btrfs: remove unused parameter fs_info from btrfs_extend_item	2019-04-29 19:02:50 +02:00
disk-io.c	btrfs: don't prematurely free work in end_workqueue_fn()	2019-12-31 16:45:36 +01:00
disk-io.h	btrfs: Make reada_tree_block_flagged private	2019-09-09 14:59:11 +02:00
export.c	btrfs: Remove 'objectid' member from struct btrfs_root	2018-10-15 17:23:25 +02:00
export.h	btrfs: replace GPL boilerplate by SPDX -- headers	2018-04-12 16:29:46 +02:00
extent-tree.c	Btrfs: fix missing data checksums after replaying a log tree	2019-12-31 16:41:58 +01:00
extent_io.c	btrfs: return error pointer from alloc_test_extent_buffer	2019-12-31 16:41:57 +01:00
extent_io.h	btrfs: Remove delalloc_end argument from extent_clear_unlock_delalloc	2019-09-09 14:58:59 +02:00
extent_map.c	btrfs: assert extent map tree lock in add_extent_mapping	2019-09-09 14:59:00 +02:00
extent_map.h	btrfs: Remove impossible condition from mergable_maps	2019-02-25 14:13:21 +01:00
file-item.c	Btrfs: fix missing data checksums after replaying a log tree	2019-12-31 16:41:58 +01:00
file.c	Btrfs: fix negative subv_writers counter and data space leak after buffered write	2019-12-17 19:56:05 +01:00
free-space-cache.c	btrfs: check page->mapping when loading free space cache	2019-12-17 19:56:02 +01:00
free-space-cache.h	btrfs: move struct io_ctl to free-space-cache.h	2019-09-09 14:59:15 +02:00
free-space-tree.c	btrfs: move basic block_group definitions to their own header	2019-09-09 14:59:03 +02:00
free-space-tree.h	btrfs: move basic block_group definitions to their own header	2019-09-09 14:59:03 +02:00
inode-item.c	btrfs: Make btrfs_find_name_in_ext_backref return struct btrfs_inode_extref	2019-09-09 14:59:16 +02:00
inode-map.c	btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents()	2019-10-15 18:50:07 +02:00
inode-map.h	btrfs: replace GPL boilerplate by SPDX -- headers	2018-04-12 16:29:46 +02:00
inode.c	btrfs: do not call synchronize_srcu() in inode_tree_del	2019-12-31 16:41:53 +01:00
ioctl.c	btrfs: abort transaction after failed inode updates in create_subvol	2019-12-31 16:42:01 +01:00
locking.c	btrfs: move cond_wake_up functions out of ctree	2019-09-09 14:59:15 +02:00
locking.h	btrfs: Remove unused locking functions	2019-09-09 14:58:59 +02:00
lzo.c	btrfs: compression: replace set_level callbacks by a common helper	2019-09-09 14:59:11 +02:00
misc.h	btrfs: move math functions to misc.h	2019-09-09 14:59:15 +02:00
ordered-data.c	btrfs: move cond_wake_up functions out of ctree	2019-09-09 14:59:15 +02:00
ordered-data.h	btrfs: don't assume ordered sums to be 4 bytes	2019-07-01 13:35:00 +02:00
orphan.c	btrfs: replace GPL boilerplate by SPDX -- sources	2018-04-12 16:29:51 +02:00
print-tree.c	btrfs: switch extent_buffer write_locks from atomic to int	2019-07-02 12:30:47 +02:00
print-tree.h	btrfs: print-tree: debugging output enhancement	2018-04-20 19:18:16 +02:00
props.c	btrfs: rename the btrfs_calc_*_metadata_size helpers	2019-09-09 14:59:13 +02:00
props.h	btrfs: delete unused function btrfs_set_prop_trans	2019-04-29 19:02:54 +02:00
qgroup.c	btrfs: tracepoints: Fix wrong parameter order for qgroup events	2019-10-17 14:09:31 +02:00
qgroup.h	btrfs: qgroup: Move reserved data accounting from btrfs_delayed_ref_head to btrfs_qgroup_extent_record	2019-02-25 14:13:39 +01:00
raid56.c	btrfs: move private raid56 definitions from ctree.h	2019-09-09 14:59:15 +02:00
raid56.h	btrfs: constify map parameter for nr_parity_stripes and nr_data_stripes	2019-07-01 13:34:58 +02:00
rcu-string.h	btrfs: replace GPL boilerplate by SPDX -- headers	2018-04-12 16:29:46 +02:00
reada.c	btrfs: don't prematurely free work in reada_start_machine_worker()	2019-12-31 16:45:50 +01:00
ref-verify.c	btrfs: fix uninitialized ret in ref-verify	2019-10-03 15:00:56 +02:00
ref-verify.h	btrfs: ref-verify: Use btrfs_ref to refactor btrfs_ref_tree_mod()	2019-04-29 19:02:49 +02:00
relocation.c	btrfs: do not leak reloc root if we fail to read the fs root	2019-12-31 16:42:04 +01:00
root-tree.c	btrfs: rename the btrfs_calc_*_metadata_size helpers	2019-09-09 14:59:13 +02:00
scrub.c	btrfs: don't prematurely free work in scrub_missing_raid56_worker()	2019-12-31 16:45:50 +01:00
send.c	btrfs: send: remove WARN_ON for readonly mount	2019-12-31 16:41:59 +01:00
send.h	btrfs: replace GPL boilerplate by SPDX -- headers	2018-04-12 16:29:46 +02:00
space-info.c	Btrfs: fix race leading to metadata space leak after task received signal	2019-10-25 19:11:34 +02:00
space-info.h	btrfs: rename btrfs_space_info_add_old_bytes	2019-09-09 14:59:18 +02:00
struct-funcs.c	btrfs: tie extent buffer and it's token together	2019-09-09 14:59:16 +02:00
super.c	btrfs: move sysfs declarations out of ctree.h	2019-09-09 14:59:06 +02:00
sysfs.c	btrfs: sysfs: move helper macros to sysfs.c	2019-09-09 14:59:08 +02:00
sysfs.h	btrfs: sysfs: move helper macros to sysfs.c	2019-09-09 14:59:08 +02:00
transaction.c	btrfs: move cond_wake_up functions out of ctree	2019-09-09 14:59:15 +02:00
transaction.h	Btrfs: fix deadlock between fiemap and transaction commits	2019-07-30 18:25:12 +02:00
tree-checker.c	Btrfs: make tree checker detect checksum items with overlapping ranges	2019-12-31 16:41:55 +01:00
tree-checker.h	btrfs: get fs_info from eb in btrfs_check_chunk_valid	2019-04-29 19:02:39 +02:00
tree-defrag.c	btrfs: open code now trivial btrfs_set_lock_blocking	2019-02-25 14:13:27 +01:00
tree-log.c	btrfs: skip log replay on orphaned roots	2019-12-31 16:42:03 +01:00
tree-log.h	btrfs: get fs_info from trans in btrfs_set_log_full_commit	2019-04-29 19:02:41 +02:00
ulist.c	btrfs: replace GPL boilerplate by SPDX -- sources	2018-04-12 16:29:51 +02:00
ulist.h	btrfs: replace GPL boilerplate by SPDX -- headers	2018-04-12 16:29:46 +02:00
uuid-tree.c	btrfs: handle ENOENT in btrfs_uuid_tree_iterate	2019-12-31 16:42:05 +01:00
volumes.c	btrfs: Consider system chunk array size for new SYSTEM chunks	2019-10-25 19:11:34 +02:00
volumes.h	btrfs: Remove btrfs_bio::flags member	2019-12-17 19:56:06 +01:00
xattr.c	Btrfs: fix failure to persist compression property xattr deletion on fsync	2019-06-17 16:37:17 +02:00
xattr.h	btrfs: cleanup btrfs_setxattr_trans and drop transaction parameter	2019-04-29 19:02:44 +02:00
zlib.c	btrfs: compression: replace set_level callbacks by a common helper	2019-09-09 14:59:11 +02:00
zstd.c	btrfs: move cond_wake_up functions out of ctree	2019-09-09 14:59:15 +02:00