tree 717aee3ea647947a67f0b9afa83ccb161398eb30
parent 01b810b889d557257580970e1a7ba9c85b54766b
author Sasha Levin <sasha.levin@oracle.com> 1431473497 -0400
committer Chris Mason <clm@fb.com> 1433298876 -0700

btrfs: use after free when closing devices

__btrfs_close_devices() would call_rcu to free the device, which is racy with
list_for_each_entry() accessing the memory to retrieve the next device on the
list.

Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
Reviewed-by: David Sterba <dsterba@suse.cz>
Signed-off-by: Chris Mason <clm@fb.com>