Skip to content

Commit

Permalink
ocfs2: revert "ocfs2: fix NULL pointer dereference when dismount and …
Browse files Browse the repository at this point in the history
…ocfs2rec simultaneously"

75f82ea ("ocfs2: fix NULL pointer dereference when dismount and
ocfs2rec simultaneously") may cause umount hang while shutting down
truncate log.

The situation is as followes:
ocfs2_dismout_volume
-> ocfs2_recovery_exit
  -> free osb->recovery_map
-> ocfs2_truncate_shutdown
  -> lock global bitmap inode
    -> ocfs2_wait_for_recovery
          -> check whether osb->recovery_map->rm_used is zero

Because osb->recovery_map is already freed, rm_used can be any other
values, so it may yield umount hang.

Signed-off-by: joyce.xue <[email protected]>
Reviewed-by: Mark Fasheh <[email protected]>
Cc: Joel Becker <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
  • Loading branch information
xuejiufei authored and torvalds committed Jun 23, 2014
1 parent 27bf630 commit b253bfd
Showing 1 changed file with 2 additions and 6 deletions.
8 changes: 2 additions & 6 deletions fs/ocfs2/super.c
Original file line number Diff line number Diff line change
Expand Up @@ -1925,15 +1925,11 @@ static void ocfs2_dismount_volume(struct super_block *sb, int mnt_err)

ocfs2_shutdown_local_alloc(osb);

ocfs2_truncate_log_shutdown(osb);

/* This will disable recovery and flush any recovery work. */
ocfs2_recovery_exit(osb);

/*
* During dismount, when it recovers another node it will call
* ocfs2_recover_orphans and queue delayed work osb_truncate_log_wq.
*/
ocfs2_truncate_log_shutdown(osb);

ocfs2_journal_shutdown(osb);

ocfs2_sync_blockdev(sb);
Expand Down

0 comments on commit b253bfd

Please sign in to comment.