uml: fix request->sector update
commit0a6d3a2a3813e7b25267366cfbf9a4a4698dd1c2
authorJeff Dike <jdike@addtoit.com>
Mon, 16 Jul 2007 06:38:47 +0000 (15 23:38 -0700)
committerLinus Torvalds <torvalds@woody.linux-foundation.org>
Mon, 16 Jul 2007 16:05:38 +0000 (16 09:05 -0700)
tree98b0c20ad616258dae150a04307ce3a2ad90adf1
parent7ff9057db7edeb210fd5c00314c52154922d8868
uml: fix request->sector update

It is theoretically possible for a request to finish and be freed between
writing it to the I/O thread and updating the sector count.  In this case, the
update will dereference a freed pointer.

To avoid this, I delay the update until processing the next sg segment, when
the request pointer is known to be good.

Signed-off-by: Jeff Dike <jdike@linux.intel.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
arch/um/drivers/ubd_kern.c