On Wed, Aug 16, 2017 at 11:56:24AM +0200, Stephan Müller wrote: > Hi Herbert, > > This patch was created against the current Linus development tree. > > The functional test was conducted at the time v3 was aired. The patch > v4 is compile-tested. > > Ciao > Stephan > > ---8<--- > For asynchronous operation, SGs are allocated without a page mapped to > them or with a page that is not used (ref-counted). If the SGL is freed, > the code must only call put_page for an SG if there was a page assigned > and ref-counted in the first place. > > This fixes a kernel crash when using io_submit with more than one iocb > using the sendmsg and sendpage (vmsplice/splice) interface. > > Signed-off-by: Stephan Mueller <smueller@xxxxxxxxxx> Patch applied. Thanks. -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt