From fa543c8dd8a4a8f0bdf843946b006e95736412a5 Mon Sep 17 00:00:00 2001 From: Zach Brown Date: Fri, 23 Jul 2010 10:30:45 -0700 Subject: [PATCH] RDS: lock rds_conn_count decrement in rds_conn_destroy() rds_conn_destroy() can race with all other modifications of the rds_conn_count but it was modifying the count without locking. Signed-off-by: Zach Brown Signed-off-by: Chris Mason Signed-off-by: Bang Nguyen --- net/rds/connection.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/net/rds/connection.c b/net/rds/connection.c index dce745625779d..40043a4c5b8c9 100644 --- a/net/rds/connection.c +++ b/net/rds/connection.c @@ -316,6 +316,7 @@ void rds_conn_shutdown(struct rds_connection *conn) void rds_conn_destroy(struct rds_connection *conn) { struct rds_message *rm, *rtmp; + unsigned long flags; rdsdebug("freeing conn %p for %pI4 -> " "%pI4\n", conn, &conn->c_laddr, @@ -353,7 +354,9 @@ void rds_conn_destroy(struct rds_connection *conn) BUG_ON(!list_empty(&conn->c_retrans)); kmem_cache_free(rds_conn_slab, conn); + spin_lock_irqsave(&rds_conn_lock, flags); rds_conn_count--; + spin_unlock_irqrestore(&rds_conn_lock, flags); } EXPORT_SYMBOL_GPL(rds_conn_destroy); -- 2.50.1