This is a note to let you know that I've just added the patch titled p9_client_write(): avoid double p9_free_req() to the 4.1-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: p9_client_write-avoid-double-p9_free_req.patch and it can be found in the queue-4.1 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From 67e808fbb0404a12d9b9830a44bbb48d447d8bc9 Mon Sep 17 00:00:00 2001 From: Al Viro <viro@xxxxxxxxxxxxxxxxxx> Date: Sat, 4 Jul 2015 16:11:05 -0400 Subject: p9_client_write(): avoid double p9_free_req() From: Al Viro <viro@xxxxxxxxxxxxxxxxxx> commit 67e808fbb0404a12d9b9830a44bbb48d447d8bc9 upstream. Braino in "9p: switch p9_client_write() to passing it struct iov_iter *"; if response is impossible to parse and we discard the request, get the out of the loop right there. Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- net/9p/client.c | 1 + 1 file changed, 1 insertion(+) --- a/net/9p/client.c +++ b/net/9p/client.c @@ -1648,6 +1648,7 @@ p9_client_write(struct p9_fid *fid, u64 if (*err) { trace_9p_protocol_dump(clnt, req->rc); p9_free_req(clnt, req); + break; } p9_debug(P9_DEBUG_9P, "<<< RWRITE count %d\n", count); Patches currently in stable-queue which might be from viro@xxxxxxxxxxxxxxxxxx are queue-4.1/9p-forgetting-to-cancel-request-on-interrupted-zero-copy-rpc.patch queue-4.1/9p-don-t-leave-a-half-initialized-inode-sitting-around.patch queue-4.1/p9_client_write-avoid-double-p9_free_req.patch -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html