Re: kmemcheck caught read from freed memory (cfq_free_io_context)

From: Pekka Enberg
Date: Wed Apr 02 2008 - 07:11:52 EST


On Wed, 2008-04-02 at 13:07 +0200, Jens Axboe wrote:
> > Makes sense, and to me Pauls analysis of the code looks totally correct
> > - there's no bug there, at least related to hlist traversal and
> > kmem_cache_free(), since we are under rcu_read_lock() and thus hold off
> > the grace for freeing.

On Wed, Apr 2, 2008 at 2:08 PM, Peter Zijlstra <a.p.zijlstra@xxxxxxxxx> wrote:
> but what holds off the slab allocator re-issueing that same object and
> someone else writing other stuff into it?

Nothing. So you cannot access the object at all after you've called
kmem_cache_free(). SLAB_RCU or no SLAB_RCU.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/