Date: Wed, 15 Oct 2014 11:48:50 -0700 From: NGie Cooper <yaneurabeya@gmail.com> To: Alexander Motin <mav@freebsd.org> Cc: "svn-src-head@freebsd.org" <svn-src-head@freebsd.org>, "svn-src-all@freebsd.org" <svn-src-all@freebsd.org>, "src-committers@freebsd.org" <src-committers@freebsd.org> Subject: Re: svn commit: r273143 - head/sys/kern Message-ID: <CAGHfRMCF030buMAVgpQxXQ8SvPMB%2BFZaDHsdKXP7GaYD7DG1cw@mail.gmail.com> In-Reply-To: <201410151836.s9FIaZBU090173@svn.freebsd.org> References: <201410151836.s9FIaZBU090173@svn.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Oct 15, 2014 at 11:36 AM, Alexander Motin <mav@freebsd.org> wrote: > Author: mav > Date: Wed Oct 15 18:36:34 2014 > New Revision: 273143 > URL: https://svnweb.freebsd.org/changeset/base/273143 > > Log: > Remove setting BIO_DONE flag for BIOs that have done() method. > > This fixes use-after-free, caused by geom_disk, completing same BIO twice > to save extra allocation, and getting BIO_DONE set after the first. > > MFC after: 1 week Hi mav, This bug is present in stable/10 as well. Could you please merge it back to releng/10.1 before the release is cut? Thank you!
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAGHfRMCF030buMAVgpQxXQ8SvPMB%2BFZaDHsdKXP7GaYD7DG1cw>