[patch] Fix use after free in jrelse_tail

[Andrew James Wade]

Hello Alexander,

"[nikita-1936] assertion failed: reiser4_no_counters_are_held()"
turned out to be a bug in the debugging code. I've applied the patch
below and haven't had a recurrence.

Cheers,
Andrew Wade

signed-off-by <[EMAIL PROTECTED]>

diff -rupN a/fs/reiser4/jnode.c b/fs/reiser4/jnode.c
--- a/fs/reiser4/jnode.c        2006-09-01 16:44:51.000000000 -0400
+++ b/fs/reiser4/jnode.c        2006-09-01 16:58:06.000000000 -0400
@@ -999,10 +999,10 @@ void jrelse_tail(jnode * node /* jnode t
 {
        assert("nikita-489", atomic_read(&node->d_count) > 0);
        atomic_dec(&node->d_count);
-       /* release reference acquired in jload_gfp() or jinit_new() */
-       jput(node);
        if (jnode_is_unformatted(node) || jnode_is_znode(node))
                LOCK_CNT_DEC(d_refs);
+       /* release reference acquired in jload_gfp() or jinit_new() */
+       jput(node);
 }
 
 /* drop reference to node data. When last reference is dropped, data are