On Wed, Sep 07, 2016 at 10:38:58AM +0300, Nikolay Borisov wrote: > btrfs_uuid_iter_rem is able to return -ENOENT, however this condition > is not handled in btrfs_uuid_tree_iterate which can lead to calling > btrfs_next_item with freed path argument, leading to a null pointer > dereference. Fix it by redoing the search but with an incremented > objectid so we don't loop over the same key. > > Signed-off-by: Nikolay Borisov <ker...@kyup.com> > Suggested-by: Chris Mason <c...@fb.com> > Link: https://lkml.kernel.org/r/57a473b0.2040...@kyup.com
I'll queue the patch for 4.9, thanks. -- To unsubscribe from this list: send the line "unsubscribe linux-btrfs" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html