Files
mirror_zfs/module/zfs
Alexander Motin 5ff2249fa5 Fix use-after-free in case of L2ARC prefetch failure
In case L2ARC read failed, l2arc_read_done() creates _different_ ZIO
to read data from the original storage device.  Unfortunately pointer
to the failed ZIO remains in hdr->b_l1hdr.b_acb->acb_zio_head, and if
some other read try to bump the ZIO priority, it will crash.

The problem is reproducible by corrupting L2ARC content and reading
some data with prefetch if l2arc_noprefetch tunable is changed to 0.
With the default setting the issue is probably not reproducible now.

Reviewed-by: Tom Caputi <tcaputi@datto.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Alexander Motin <mav@FreeBSD.org>
Sponsored-By: iXsystems, Inc.
Closes #9648
2019-12-03 09:59:30 -08:00
..
2019-07-26 10:54:14 -07:00
2019-06-19 09:48:12 -07:00
2019-06-19 09:48:12 -07:00
2019-10-09 10:36:03 -07:00
2019-12-03 09:51:44 -08:00
2019-09-02 17:56:41 -07:00
2019-09-02 17:56:41 -07:00
2019-11-21 09:32:57 -08:00
2017-10-11 16:54:48 -04:00
2019-10-01 13:17:32 -07:00
2015-01-16 14:41:26 -08:00
2019-10-10 15:45:52 -07:00
2019-06-19 09:48:12 -07:00
2019-10-11 10:13:21 -07:00
2019-10-09 10:36:03 -07:00
2010-08-31 13:41:58 -07:00
2019-09-02 17:56:41 -07:00
2019-11-27 10:15:01 -08:00
2019-10-09 10:36:03 -07:00
2019-06-20 18:29:02 -07:00
2019-06-20 18:29:02 -07:00
2019-11-27 10:15:01 -08:00
2019-09-05 14:49:49 -07:00
2019-09-02 17:56:41 -07:00
2019-09-05 14:49:49 -07:00
2019-09-02 17:56:41 -07:00
2019-10-02 09:15:12 -07:00
2019-11-11 09:27:59 -08:00
2019-09-02 17:56:41 -07:00
2019-09-02 17:56:41 -07:00
2019-09-02 17:56:41 -07:00
2018-02-09 10:08:05 -08:00
2019-07-26 10:54:14 -07:00