On Tue, 22 Feb 2022 08:17:51 -0800, Dylan Yudaken wrote:
> io_rsrc_ref_quiesce will unlock the uring while it waits for references to
> the io_rsrc_data to be killed.
> There are other places to the data that might add references to data via
> calls to io_rsrc_node_switch.
> There is a race condition where this reference can be added after the
> completion has been signalled. At this point the io_rsrc_ref_quiesce call
> will wake up and relock the uring, assuming the data is unused and can be
> freed - although it is actually being used.
>
> [...]
Applied, thanks!
[1/1] io_uring: disallow modification of rsrc_data during quiesce
commit: 80912cef18f16f8fe59d1fb9548d4364342be360
Best regards,
--
Jens Axboe
