Re: [V9fs-developer] [PATCH] 9p: fix Use-After-Free in p9_write_work()

Dominique Martinet wrote on Mon, Jul 30, 2018:

Basically, a more global view of the problem is a race between
p9_tag_lookup returning a p9_req_t and another thread freeing it.

(just correcting myself here, p9_tag_lookup won't be enough for the
write side, but similarily you'd just need to increment the refcount
when you schedule work with it and decrement when the worker is done)

-- 
Dominique