HomeFreeBSD

Fix use after free regression in spa_remove_healed_errors()

Description

Fix use after free regression in spa_remove_healed_errors()

6839ec6f1098c28ff7b772f1b31b832d05e6b567 placed code in
spa_remove_healed_errors() that uses a pointer after the kmem_free()
call that frees it.

Reported-by: Coverity (CID-1562375)
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Reviewed-by: George Amanakis <gamanakis@gmail.com>
Signed-off-by: Richard Yao <richard.yao@alumni.stonybrook.edu>
Closes #14860

Details

Provenance
Richard Yao <richard.yao@alumni.stonybrook.edu>Authored on May 12 2023, 8:47 PM
Brian Behlendorf <behlendorf1@llnl.gov>Committed on May 15 2023, 5:29 PM
Parents
rG7381ddf1abd1: zil: Free lwb_buf after write completion.
Branches
Unknown
Tags
Unknown

Event Timeline

Brian Behlendorf <behlendorf1@llnl.gov> committed rGc87798d8ff6a: Fix use after free regression in spa_remove_healed_errors() (authored by Richard Yao <richard.yao@alumni.stonybrook.edu>).May 15 2023, 5:29 PM