diff options
| author | Jan Kara <jack@suse.cz> | 2012-02-20 17:49:56 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2012-04-02 09:27:19 -0700 |
| commit | bc9d8a3ba0a4b0c136c78ba5e35906401d7dc5ba (patch) | |
| tree | f54b9b3d46c3fa8d60dda0227987fbb97071b81b /fs | |
| parent | 19f490da69bacce1d3b9934116bbff0ae5f50530 (diff) | |
| download | kernel_samsung_crespo-bc9d8a3ba0a4b0c136c78ba5e35906401d7dc5ba.zip kernel_samsung_crespo-bc9d8a3ba0a4b0c136c78ba5e35906401d7dc5ba.tar.gz kernel_samsung_crespo-bc9d8a3ba0a4b0c136c78ba5e35906401d7dc5ba.tar.bz2 | |
udf: Fix deadlock in udf_release_file()
commit a0391a3ae91d301c0e59368531a4de5f0b122bcf upstream.
udf_release_file() can be called from munmap() path with mmap_sem held. Thus
we cannot take i_mutex there because that ranks above mmap_sem. Luckily,
i_mutex is not needed in udf_release_file() anymore since protection by
i_data_sem is enough to protect from races with write and truncate.
Reported-by: Al Viro <viro@ZenIV.linux.org.uk>
Reviewed-by: Namjae Jeon <linkinjeon@gmail.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'fs')
| -rw-r--r-- | fs/udf/file.c | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/fs/udf/file.c b/fs/udf/file.c index 0c0c9d3..3438b00 100644 --- a/fs/udf/file.c +++ b/fs/udf/file.c @@ -201,12 +201,10 @@ out: static int udf_release_file(struct inode *inode, struct file *filp) { if (filp->f_mode & FMODE_WRITE) { - mutex_lock(&inode->i_mutex); down_write(&UDF_I(inode)->i_data_sem); udf_discard_prealloc(inode); udf_truncate_tail_extent(inode); up_write(&UDF_I(inode)->i_data_sem); - mutex_unlock(&inode->i_mutex); } return 0; } |