ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (4b9f2042) · Commits · e / devices / android_kernel_oneplus_sm7250

fs/ceph/caps.c

+9 −2

Original line number	Diff line number	Diff line
		@@ -3809,6 +3809,7 @@ void ceph_handle_caps(struct ceph_mds_session *session,
		*/
		void ceph_check_delayed_caps(struct ceph_mds_client *mdsc)
		{
		struct inode *inode;
		struct ceph_inode_info *ci;
		int flags = CHECK_CAPS_NODELAY;

		@@ -3824,9 +3825,15 @@ void ceph_check_delayed_caps(struct ceph_mds_client *mdsc)
		time_before(jiffies, ci->i_hold_caps_max))
		break;
		list_del_init(&ci->i_cap_delay_list);

		inode = igrab(&ci->vfs_inode);
		spin_unlock(&mdsc->cap_delay_lock);
		dout("check_delayed_caps on %p\n", &ci->vfs_inode);

		if (inode) {
		dout("check_delayed_caps on %p\n", inode);
		ceph_check_caps(ci, flags, NULL);
		iput(inode);
		}
		}
		spin_unlock(&mdsc->cap_delay_lock);
		}