Hello,

On Fri, Jun 02, 2017 at 02:53:55PM -0700, Shaohua Li wrote:
> @@ -630,7 +633,11 @@ static struct kernfs_node *__kernfs_new_node(struct 
> kernfs_root *root,
>       if (!kn)
>               goto err_out1;
>  
> -     ret = ida_simple_get(&root->ino_ida, 1, 0, GFP_KERNEL);
> +     idr_preload(GFP_KERNEL);
> +     spin_lock(&kernfs_idr_lock);
> +     ret = idr_alloc(&root->ino_idr, kn, 1, 0, GFP_ATOMIC);
> +     spin_unlock(&kernfs_idr_lock);
> +     idr_preload_end();

So, this ends up populating the idr w/ a kn which isn't fully
initialized yet, which can lead to bugs which are difficult to hunt
down as we're gonna allow kn's to be looked up through ino / gen.  We
probably should allocate with NULL here and populate the actual
pointer with idr_replace() after the kn is fully initialized / online.

Thanks.

-- 
tejun

Reply via email to