tree 03a95cea66597c0b7289ea6fbdc13785a5e21919
parent b1deefc99e668348f7c785c6ece5f6ff4c6d8b5c
author Jan Kara <jack@suse.cz> 1359517697 -0500
committer Theodore Ts'o <tytso@mit.edu> 1359517697 -0500

ext4: fix possible use-after-free with AIO

Running AIO is pinning inode in memory using file reference. Once AIO
is completed using aio_complete(), file reference is put and inode can
be freed from memory. So we have to be sure that calling aio_complete()
is the last thing we do with the inode.

CC: stable@vger.kernel.org
Reviewed-by: Carlos Maiolino <cmaiolino@redhat.com>
Acked-by: Jeff Moyer <jmoyer@redhat.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>