Tejun Heo a6d7cff472 fs/aio: Add explicit RCU grace period when freeing kioctx
While fixing refcounting, e34ecee2ae79 ("aio: Fix a trinity splat")
incorrectly removed explicit RCU grace period before freeing kioctx.
The intention seems to be depending on the internal RCU grace periods
of percpu_ref; however, percpu_ref uses a different flavor of RCU,
sched-RCU.  This can lead to kioctx being freed while RCU read
protected dereferences are still in progress.

Fix it by updating free_ioctx() to go through call_rcu() explicitly.

v2: Comment added to explain double bouncing.

Signed-off-by: Tejun Heo <tj@kernel.org>
Reported-by: Jann Horn <jannh@google.com>
Fixes: e34ecee2ae79 ("aio: Fix a trinity splat")
Cc: Kent Overstreet <kent.overstreet@gmail.com>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: stable@vger.kernel.org # v3.13+
2018-03-14 12:10:17 -07:00
..
2018-02-06 14:43:37 +00:00
2018-03-04 11:04:27 -08:00
2018-02-07 14:25:22 -08:00
2018-02-07 14:25:22 -08:00
2017-11-16 11:41:22 -08:00
2018-01-24 17:33:57 -05:00
2018-03-08 12:56:32 -05:00
2018-02-08 15:18:32 -08:00
2018-02-06 18:32:45 -08:00
2018-01-01 10:09:33 -05:00
2018-03-07 11:47:15 +01:00
2018-02-07 14:25:22 -08:00
2017-09-04 19:05:15 -04:00
2018-02-06 18:32:45 -08:00
2018-01-03 10:13:36 -08:00
2017-12-07 14:23:30 -05:00
2018-01-29 07:27:24 -08:00
2018-02-06 10:41:33 -08:00
2018-02-08 15:18:32 -08:00
2017-12-09 20:16:33 -05:00