abd_*_off() is pretty fragile to broken callers, and should be strengthened.

locally, I'll likely put in ASSERTs to make sure of things like size != 0, and 
return quickly when no work ought to be done.

I don't think the problem is in the abd_copy() call (which just inlines to 
abd_copy_off() thanks to abd.h), just that the change to the memory system has 
exposed something pre-existing that through chance did not cause (much) 
crashing.

This particular crash still feels like a use-after-free.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openzfs/openzfs/commit/4ee0199ec059ca9417a72125beae8d89fbc5a9df#commitcomment-21957877
------------------------------------------
openzfs-developer
Archives: https://openzfs.topicbox-beta.com/groups/developer/
Powered by Topicbox: https://topicbox-beta.com

Reply via email to