Re: [PATCH] Fix a use-after-free in the volumes code.

2014-06-17 Thread Satoru Takeuchi
Hi Adam, (2014/06/14 8:43), Adam Buchbinder wrote: When a struct btrfs_fs_devices was being torn down by btrfs_close_devices(), there was an invalidated pointer in the global list fs_uuids which still pointed to it; if a device was closed and then reopened (which btrfs-convert does), freed

[PATCH] Fix a use-after-free in the volumes code.

2014-06-13 Thread Adam Buchbinder
When a struct btrfs_fs_devices was being torn down by btrfs_close_devices(), there was an invalidated pointer in the global list fs_uuids which still pointed to it; if a device was closed and then reopened (which btrfs-convert does), freed memory would be accessed. This was found using