On Thu, Jan 25, 2018 at 11:02:51AM -0700, Liu Bo wrote:
> In cases that the whole fs flips into readonly status due to failures in
> critical sections, then log tree's blocks are still dirty, and this leads
> to a crash during umount time, the crash is about use-after-free,
>
> umount
> -> close_ctree
> -> stop workers
> -> iput(btree_inode)
> -> iput_final
> -> write_inode_now
> -> ...
> -> queue job on stop'd workers
>
> cc: <stable@xxxxxxxxxxxxxxx> v3.12+
> Fixes: 681ae50917df ("Btrfs: cleanup reserved space when freeing tree log on error")
> Signed-off-by: Liu Bo <bo.li.liu@xxxxxxxxxx>
Reviewed-by: Josef Bacik <jbacik@xxxxxx>
Thanks,
Josef
--
To unsubscribe from this list: send the line "unsubscribe linux-btrfs" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
