libceph: fix double-free of page vector
Sage Weil [Mon, 24 Oct 2011 16:05:47 +0000 (09:05 -0700)]
ceph_release_page_vector() kfrees the vector; we shouldn't do it here too.

Reported-by: Jeff Wu <cpwu@tnsoft.com.cn>
Signed-off-by: Sage Weil <sage@newdream.net>

fs/ceph/addr.c

index 5ffee90..4144caf 100644 (file)
@@ -345,7 +345,6 @@ static int start_read(struct inode *inode, struct list_head *page_list, int max)
 
 out_pages:
        ceph_release_page_vector(pages, nr_pages);
-       kfree(pages);
 out:
        ceph_osdc_put_request(req);
        return ret;