Messages in this thread | | | Date | Mon, 30 Jul 2018 02:18:00 +0200 | From | Dominique Martinet <> | Subject | Re: [V9fs-developer] [PATCH] 9p: fix Use-After-Free in p9_write_work() |
| |
Dominique Martinet wrote on Mon, Jul 30, 2018: > Basically, a more global view of the problem is a race between > p9_tag_lookup returning a p9_req_t and another thread freeing it.
(just correcting myself here, p9_tag_lookup won't be enough for the write side, but similarily you'd just need to increment the refcount when you schedule work with it and decrement when the worker is done)
-- Dominique
| |