Jeff Dike 0a6d3a2a38 uml: fix request->sector update
It is theoretically possible for a request to finish and be freed between
writing it to the I/O thread and updating the sector count.  In this case, the
update will dereference a freed pointer.

To avoid this, I delay the update until processing the next sg segment, when
the request pointer is known to be good.

Signed-off-by: Jeff Dike <jdike@linux.intel.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2007-07-16 09:05:38 -07:00
..
2006-05-01 18:17:44 -07:00
2006-09-27 08:26:15 -07:00
2007-05-07 12:13:01 -07:00
2007-06-08 17:23:33 -07:00
2007-05-07 12:13:01 -07:00
2006-09-27 08:26:15 -07:00
2007-05-07 12:13:01 -07:00
2007-05-07 12:13:01 -07:00
2007-05-07 12:13:01 -07:00
2007-05-08 11:15:20 -07:00
2006-09-29 09:18:04 -07:00
2007-05-08 11:15:20 -07:00
2006-10-10 15:37:24 -07:00
2007-05-07 12:13:01 -07:00
2007-05-07 12:13:01 -07:00
2007-05-07 12:13:02 -07:00
2006-09-27 08:26:15 -07:00
2007-05-07 12:13:01 -07:00
2006-09-27 08:26:15 -07:00
2007-05-07 12:13:02 -07:00
2007-05-07 12:13:02 -07:00
2007-05-07 12:13:01 -07:00
2007-07-16 09:05:38 -07:00
2007-05-07 12:13:01 -07:00
2006-10-08 16:34:08 -07:00
2007-05-07 12:13:01 -07:00