proxmox-mirrors/mirror_zfs
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_zfs synced 2025-04-28 16:17:31 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix use-afer-free regression in RAIDZ expansion

Browse Source 
We should not dereference rra after the last zio_nowait() is called.
It seems very unlikely, but ASAN in ztest managed to catch it.

Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by:	Alexander Motin <mav@FreeBSD.org>
Sponsored by:	iXsystems, Inc.
Closes #16868
This commit is contained in:
Alexander Motin 2024-12-14 17:02:11 -05:00 committed by Brian Behlendorf
parent 2284a61129
commit 696943533c
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
module/zfs/vdev_raidz.c
View File

@ -3914,8 +3914,8 @@ raidz_reflow_read_done(zio_t *zio)
if (atomic_dec_32_nv(&rra->rra_tbd) > 0) if (atomic_dec_32_nv(&rra->rra_tbd) > 0)
return; return;
rra->rra_tbd = rra->rra_writes; uint32_t writes = rra->rra_tbd = rra->rra_writes;
for (uint64_t i = 0; i < rra->rra_writes; i++) for (uint64_t i = 0; i < writes; i++)
zio_nowait(rra->rra_zio[i]); zio_nowait(rra->rra_zio[i]);
} }