Commit 9b627e9b authored Jul 02, 2009 by Jiri Slaby Committed by Chris Mason Jul 02, 2009

Btrfs: fix use after free in btrfs_start_workers fail path



worker memory is already freed on one fail path in btrfs_start_workers,
but is still dereferenced. Switch the dereference and kfree.

Signed-off-by: Jiri Slaby <jirislaby@gmail.com>
Signed-off-by: Chris Mason <chris.mason@oracle.com>

parent 94272164

fs/btrfs/async-thread.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -299,8 +299,8 @@ int btrfs_start_workers(struct btrfs_workers *workers, int num_workers)
		"btrfs-%s-%d", workers->name,
		workers->num_workers + i);
		if (IS_ERR(worker->task)) {
		kfree(worker);
		ret = PTR_ERR(worker->task);
		kfree(worker);
		goto fail;
		}