diff options
author | Mark Fasheh <mark.fasheh@oracle.com> | 2007-05-09 20:34:26 -0400 |
---|---|---|
committer | Mark Fasheh <mark.fasheh@oracle.com> | 2007-05-25 14:00:46 -0400 |
commit | 8fccfc829a66b8b879c6672940523a402a786ce1 (patch) | |
tree | c36ea2c8b9de97102397a755bf10cb3997461071 | |
parent | 5c3c6bb7709bf2bf4132750124879b3d89183e46 (diff) |
ocfs2: fix inode leak
We weren't cleaning up our inode reference on error in
ocfs2_reserve_local_alloc_bits(). Add a check for error return and iput() if
need be. Move the code to set the alloc context inode info to the end of the
function so we don't have any possibility of passing back a bad pointer.
Signed-off-by: Mark Fasheh <mark.fasheh@oracle.com>
-rw-r--r-- | fs/ocfs2/localalloc.c | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/fs/ocfs2/localalloc.c b/fs/ocfs2/localalloc.c index 4dedd9789108..545f7892cdf3 100644 --- a/fs/ocfs2/localalloc.c +++ b/fs/ocfs2/localalloc.c | |||
@@ -471,9 +471,6 @@ int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *osb, | |||
471 | 471 | ||
472 | mutex_lock(&local_alloc_inode->i_mutex); | 472 | mutex_lock(&local_alloc_inode->i_mutex); |
473 | 473 | ||
474 | ac->ac_inode = local_alloc_inode; | ||
475 | ac->ac_which = OCFS2_AC_USE_LOCAL; | ||
476 | |||
477 | if (osb->local_alloc_state != OCFS2_LA_ENABLED) { | 474 | if (osb->local_alloc_state != OCFS2_LA_ENABLED) { |
478 | status = -ENOSPC; | 475 | status = -ENOSPC; |
479 | goto bail; | 476 | goto bail; |
@@ -511,10 +508,14 @@ int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *osb, | |||
511 | } | 508 | } |
512 | } | 509 | } |
513 | 510 | ||
511 | ac->ac_inode = local_alloc_inode; | ||
512 | ac->ac_which = OCFS2_AC_USE_LOCAL; | ||
514 | get_bh(osb->local_alloc_bh); | 513 | get_bh(osb->local_alloc_bh); |
515 | ac->ac_bh = osb->local_alloc_bh; | 514 | ac->ac_bh = osb->local_alloc_bh; |
516 | status = 0; | 515 | status = 0; |
517 | bail: | 516 | bail: |
517 | if (status < 0 && local_alloc_inode) | ||
518 | iput(local_alloc_inode); | ||
518 | 519 | ||
519 | mlog_exit(status); | 520 | mlog_exit(status); |
520 | return status; | 521 | return status; |