jfs: makes diUnmount/diMount in jfs_mount_rw atomic
authorOleg Kanatov <okanatov@gmail.com>
Fri, 28 Oct 2022 12:22:54 +0000 (15:22 +0300)
committerDave Kleikamp <dave.kleikamp@oracle.com>
Thu, 10 Nov 2022 21:22:23 +0000 (15:22 -0600)
commita60dca73a1a8079d867b2c2e9549440346c1ba83
tree0dd5dbe6120024a988fd4b08217b57ae05b3f2c8
parentd0e482c45c50117bfb568825a41f0693e5f33c0f
jfs: makes diUnmount/diMount in jfs_mount_rw atomic

jfs_mount_rw can call diUnmount and then diMount. These calls change the
imap pointer. Between these two calls there may be calls of function
jfs_lookup(). The jfs_lookup() function calls jfs_iget(), which, in turn
calls diRead(). The latter references the imap pointer. That may cause
diRead() to refer to a pointer freed in diUnmount().  This commit makes
the calls to diUnmount()/diMount() atomic so that nothing will read the
imap pointer until the whole remount is completed.

Signed-off-by: Oleg Kanatov <okanatov@gmail.com>
Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com>
fs/jfs/jfs_imap.c
fs/jfs/jfs_mount.c