818b9b8f5e
When the DSM operation is cancelled asynchronously, we set iocb->ret to
-ECANCELED. However, the callback function only checks the return value
of the completed aio, which may have completed succesfully prior to the
cancellation and thus the callback ends up continuing the dsm operation
instead of bailing out. Fix this.
Secondly, fix a potential use-after-free by removing the bottom half and
enqueuing the completion directly.
Fixes:
|
||
|---|---|---|
| .. | ||
| ctrl.c | ||
| dif.c | ||
| dif.h | ||
| Kconfig | ||
| meson.build | ||
| ns.c | ||
| nvme.h | ||
| subsys.c | ||
| trace-events | ||
| trace.h | ||