From: Jérémie Galarneau <jeremie.galarneau@efficios.com>
Date: Sat, 25 Jul 2015 20:24:05 +0000 (-0400)
Subject: Fix: RCU read-side lock released too early in destroy_agent_app
X-Git-Tag: v2.8.0-rc1~544
X-Git-Url: https://git.lttng.org/?p=lttng-tools.git;a=commitdiff_plain;h=d558f2363a2daf3e456a28a6089f7464837ed542

Fix: RCU read-side lock released too early in destroy_agent_app

Signed-off-by: Jérémie Galarneau <jeremie.galarneau@efficios.com>
---

diff --git a/src/bin/lttng-sessiond/agent-thread.c b/src/bin/lttng-sessiond/agent-thread.c
index 33cb387c9..9ac975cbf 100644
--- a/src/bin/lttng-sessiond/agent-thread.c
+++ b/src/bin/lttng-sessiond/agent-thread.c
@@ -90,13 +90,13 @@ static void destroy_agent_app(int sock)
 	rcu_read_lock();
 	app = agent_find_app_by_sock(sock);
 	assert(app);
-	rcu_read_unlock();
 
-	/* RCU read side lock is taken in this function call. */
+	/* RCU read side lock is assumed to be held by this function. */
 	agent_delete_app(app);
 
 	/* The application is freed in a RCU call but the socket is closed here. */
 	agent_destroy_app(app);
+	rcu_read_unlock();
 }
 
 /*
diff --git a/src/bin/lttng-sessiond/agent.c b/src/bin/lttng-sessiond/agent.c
index 6375894a7..1eb64c25e 100644
--- a/src/bin/lttng-sessiond/agent.c
+++ b/src/bin/lttng-sessiond/agent.c
@@ -680,6 +680,8 @@ void agent_add_app(struct agent_app *app)
 
 /*
  * Delete agent application from the global hash table.
+ *
+ * rcu_read_lock() must be held by the caller.
  */
 void agent_delete_app(struct agent_app *app)
 {
@@ -691,9 +693,7 @@ void agent_delete_app(struct agent_app *app)
 	DBG3("Agent deleting app pid: %d and sock: %d", app->pid, app->sock->fd);
 
 	iter.iter.node = &app->node.node;
-	rcu_read_lock();
 	ret = lttng_ht_del(agent_apps_ht_by_sock, &iter);
-	rcu_read_unlock();
 	assert(!ret);
 }