[PATCH v2] gfs2: move brelse() after buffer head accesses
From: Hongling Zeng
Date: Mon Aug 24 2026 - 21:55:35 EST
The brelse() call happens before all buffer head accesses are complete.
While the reference counting prevents a real use-after-free in practice,
this pattern is error-prone for future maintenance.
Move the brelse() call to the end of the function to make the intent
clearer and eliminate potential static analysis warnings.
Suggested-by: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
Suggested-by: Andrew Price <anprice@xxxxxxxxxx>
Signed-off-by: Hongling Zeng <zenghongling@xxxxxxxxxx>
---
Change in v2:
-Correct the commit.
---
fs/gfs2/log.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/fs/gfs2/log.c b/fs/gfs2/log.c
index 78bba8cc10b8..a92c84146de9 100644
--- a/fs/gfs2/log.c
+++ b/fs/gfs2/log.c
@@ -1038,7 +1038,6 @@ void gfs2_remove_from_journal(struct buffer_head *bh, int meta)
set_bit(TR_TOUCHED, &tr->tr_flags);
}
was_pinned = 1;
- brelse(bh);
}
if (bd) {
if (bd->bd_tr) {
@@ -1056,6 +1055,8 @@ void gfs2_remove_from_journal(struct buffer_head *bh, int meta)
}
clear_buffer_dirty(bh);
clear_buffer_uptodate(bh);
+ if (was_pinned)
+ brelse(bh);
}
/**
--
2.25.1