diff options
| author | Hongling Zeng <zenghongling@kylinos.cn> | 2026-08-31 13:38:01 +0800 |
|---|---|---|
| committer | David Sterba <dsterba@suse.com> | 2026-09-14 21:59:50 +0200 |
| commit | 0594e3423f4ba3137c734371169491f9a98e9af4 (patch) | |
| tree | e8e69ff4dbff145c19f6fa66005930bc81a7eaac /tools/perf/scripts/python/bin/stackcollapse-record | |
| parent | 3a35e787ac1acf94d33eebb26fd7248811cc66c9 (diff) | |
| download | linux-next-0594e3423f4ba3137c734371169491f9a98e9af4.tar.gz linux-next-0594e3423f4ba3137c734371169491f9a98e9af4.zip | |
btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()
mark_block_group_to_copy() iterates over the commit root with
skip_locking=true. A concurrent transaction commit can swap and free
the commit root during iteration, causing use-after-free when
accessing extent buffers.
Fix it by using path->need_commit_sem to protect the commit root search.
Fixes: 78ce9fc269af ("btrfs: zoned: mark block groups to copy for device-replace")
CC: stable@vger.kernel.org
Assisted-by: Codex:gpt-5.5
Reviewed-by: Johannes Thumshirn <johannes.thumshirn@wdc.com>
Signed-off-by: Hongling Zeng <zenghongling@kylinos.cn>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
Diffstat (limited to 'tools/perf/scripts/python/bin/stackcollapse-record')
0 files changed, 0 insertions, 0 deletions