Re: [syzbot] [v9fs?] KASAN: slab-use-after-free Read in p9_fid_destroy
From: David Howells
Date: Thu May 23 2024 - 14:07:20 EST
asmadeus@xxxxxxxxxxxxx wrote:
> > There's a problem in 9p's interaction with netfslib whereby a crash occurs
> > because the 9p_fid structs get forcibly destroyed during client teardown
> > (without paying attention to their refcounts) before netfslib has finished
> > with them. However, it's not a simple case of deferring the clunking that
> > p9_fid_put() does as that requires the client.
>
> "as that requires the client" doesn't parse
"... as that requires the p9_client record to still be present."?
David