浏览代码

direct-io: be sure to assign dio->bio_bdev for both paths

btrfs sets ->submit_io(), and we failed to set the block dev for
that path. That resulted in a potential NULL dereference when
we later wait for IO in dio_await_one().

Reported-by: kernel test robot <ying.huang@linux.intel.com>
Signed-off-by: Jens Axboe <axboe@fb.com>
Jens Axboe 9 年之前
父节点
当前提交
c1c534609f
共有 1 个文件被更改,包括 3 次插入3 次删除
  1. 3 3
      fs/direct-io.c

+ 3 - 3
fs/direct-io.c

@@ -399,14 +399,14 @@ static inline void dio_bio_submit(struct dio *dio, struct dio_submit *sdio)
 	if (dio->is_async && dio->rw == READ && dio->should_dirty)
 	if (dio->is_async && dio->rw == READ && dio->should_dirty)
 		bio_set_pages_dirty(bio);
 		bio_set_pages_dirty(bio);
 
 
+	dio->bio_bdev = bio->bi_bdev;
+
 	if (sdio->submit_io) {
 	if (sdio->submit_io) {
 		sdio->submit_io(dio->rw, bio, dio->inode,
 		sdio->submit_io(dio->rw, bio, dio->inode,
 			       sdio->logical_offset_in_bio);
 			       sdio->logical_offset_in_bio);
 		dio->bio_cookie = BLK_QC_T_NONE;
 		dio->bio_cookie = BLK_QC_T_NONE;
-	} else {
+	} else
 		dio->bio_cookie = submit_bio(dio->rw, bio);
 		dio->bio_cookie = submit_bio(dio->rw, bio);
-		dio->bio_bdev = bio->bi_bdev;
-	}
 
 
 	sdio->bio = NULL;
 	sdio->bio = NULL;
 	sdio->boundary = 0;
 	sdio->boundary = 0;