summaryrefslogtreecommitdiff
path: root/fs/fuse
diff options
context:
space:
mode:
authorMiklos Szeredi <mszeredi@redhat.com>2020-05-19 15:50:37 +0300
committerMiklos Szeredi <mszeredi@redhat.com>2020-05-19 15:50:37 +0300
commit32f98877c57bee6bc27f443a96f49678a2cd6a50 (patch)
tree0c4e6a0e64dc7ba0920c961432172518b6aa6b37 /fs/fuse
parenta5005c3cda6eeb6b95645e6cc32f58dafeffc976 (diff)
downloadlinux-32f98877c57bee6bc27f443a96f49678a2cd6a50.tar.xz
fuse: don't check refcount after stealing page
page_count() is unstable. Unless there has been an RCU grace period between when the page was removed from the page cache and now, a speculative reference may exist from the page cache. Reported-by: Matthew Wilcox <willy@infradead.org> Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Diffstat (limited to 'fs/fuse')
-rw-r--r--fs/fuse/dev.c1
1 files changed, 0 insertions, 1 deletions
diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
index b8962581c699..ec97cabe51ce 100644
--- a/fs/fuse/dev.c
+++ b/fs/fuse/dev.c
@@ -764,7 +764,6 @@ static int fuse_check_page(struct page *page)
{
if (page_mapcount(page) ||
page->mapping != NULL ||
- page_count(page) != 1 ||
(page->flags & PAGE_FLAGS_CHECK_AT_PREP &
~(1 << PG_locked |
1 << PG_referenced |