NVMe: Namespace use after free on surprise removal
authorKeith Busch <keith.busch@intel.com>
Fri, 31 Jan 2014 23:53:39 +0000 (16:53 -0700)
committerMatthew Wilcox <matthew.r.wilcox@intel.com>
Sun, 2 Feb 2014 18:31:15 +0000 (13:31 -0500)
commit9ac27090f61ea6735a62b0a98c7669c833bcdc09
tree1ac24bb79b089a52e162fa80b44d1a2ca0127051
parentbdfd70fde389412be60f7e8aaed5732dc26fc8ac
NVMe: Namespace use after free on surprise removal

An nvme block device may have open references when the device is
removed. New commands may still be sent on the removed device, so we
need to ref count the opens, return errors for new commands, and not
free the namespace and nvme_dev until all references are closed.

Signed-off-by: Keith Busch <keith.busch@intel.com>
Signed-off-by: Matthew Wilcox <matthew.r.wilcox@intel.com>
drivers/block/nvme-core.c