[1/5] blockjob: fix dead pointer in txn list

Commit Message

John Snow Oct. 20, 2016, 10:20 p.m. UTC

From: Vladimir Sementsov-Ogievskiy <[e-mail]>

Though it is not intended to be reached through normal circumstances,
if we do not gracefully deconstruct the transaction QLIST, we may wind
up with stale pointers in the list.

The rest of this series attempts to address the underlying issues,
but this should fix list inconsistencies.

Signed-off-by: Vladimir Sementsov-Ogievskiy <[e-mail]>
Tested-by: John Snow <[e-mail]>
Reviewed-by: John Snow <[e-mail]>
[Rewrote commit message. --js]
Signed-off-by: John Snow <[e-mail]>
Reviewed-by: Eric Blake <[e-mail]>
Reviewed-by: Kevin Wolf <[e-mail]>

Signed-off-by: John Snow <[e-mail]>
---
 blockjob.c | 1 +
 1 file changed, 1 insertion(+)

Patch

diff --git a/blockjob.c b/blockjob.c
index e1d0382..f55bfec 100644
--- a/blockjob.c
+++ b/blockjob.c
@@ -247,6 +247,7 @@  static void block_job_completed_single(BlockJob *job)
     }
 
     if (job->txn) {
+        QLIST_REMOVE(job, txn_list);
         block_job_txn_unref(job->txn);
     }
     block_job_unref(job);