mirror_zfs/module
Alexander Motin 388ef045b2 Fix use-after-free in case of L2ARC prefetch failure
In case L2ARC read failed, l2arc_read_done() creates _different_ ZIO
to read data from the original storage device.  Unfortunately pointer
to the failed ZIO remains in hdr->b_l1hdr.b_acb->acb_zio_head, and if
some other read try to bump the ZIO priority, it will crash.

The problem is reproducible by corrupting L2ARC content and reading
some data with prefetch if l2arc_noprefetch tunable is changed to 0.
With the default setting the issue is probably not reproducible now.

Reviewed-by: Tom Caputi <tcaputi@datto.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Alexander Motin <mav@FreeBSD.org>
Sponsored-By: iXsystems, Inc.
Closes #9648
2020-01-22 13:49:05 -08:00
..
avl Fix typos in module/ 2020-01-22 13:48:59 -08:00
icp Linux 5.0 compat: SIMD compatibility 2020-01-22 13:49:01 -08:00
lua Fix typos in module/ 2020-01-22 13:48:59 -08:00
nvpair Fix typos in module/ 2020-01-22 13:48:59 -08:00
spl Add missing documentation for some KMC flags 2020-01-22 13:49:04 -08:00
unicode Update build system and packaging 2018-05-29 16:00:33 -07:00
zcommon Increase allowed 'special_small_blocks' maximum value 2020-01-22 13:49:05 -08:00
zfs Fix use-after-free in case of L2ARC prefetch failure 2020-01-22 13:49:05 -08:00
.gitignore Adapt gitignore for modules 2020-01-22 13:49:05 -08:00
Makefile.in module/Makefile.in: don't run xargs if empty 2020-01-22 13:49:02 -08:00