Details
-
Bug
-
Resolution: Unresolved
-
Minor
-
None
-
None
-
None
-
3
-
9223372036854775807
Description
Reading the code I found that it is possible that "pool_locked logic" in qmt_seed_glbe_all works only for one pool. However, there are could be several lqes in qtie_lqes array and as a result several different pools.
For example, qmt_seedl_glbe_all is called with pool_locked==true from qmt_site_recalc_cb. In that case only one quota pool is locked at the moment. If there are also other pools to be handled they are also should be locked. Otherwise, in the worst case qmt_sarr_get_idx could hit use after free error if one these pools would be extended(lu_tgt_pool_extend).