)]}'
{
  "commit": "d729d4e99fb85f734805ff37dd79f38e7db21c0f",
  "tree": "7a713ecd9928357b1ae8fac0277079488c0edd9b",
  "parents": [
    "573a3228ca3268441ce334251cb9fec0d69ca574"
  ],
  "author": {
    "name": "David Howells",
    "email": "dhowells@redhat.com",
    "time": "Fri Mar 11 13:23:38 2022 +0000"
  },
  "committer": {
    "name": "Greg Kroah-Hartman",
    "email": "gregkh@linuxfoundation.org",
    "time": "Wed Mar 16 14:16:02 2022 +0100"
  },
  "message": "watch_queue, pipe: Free watchqueue state after clearing pipe ring\n\ncommit db8facfc9fafacefe8a835416a6b77c838088f8b upstream.\n\nIn free_pipe_info(), free the watchqueue state after clearing the pipe\nring as each pipe ring descriptor has a release function, and in the\ncase of a notification message, this is watch_queue_pipe_buf_release()\nwhich tries to mark the allocation bitmap that was previously released.\n\nFix this by moving the put of the pipe\u0027s ref on the watch queue to after\nthe ring has been cleared.  We still need to call watch_queue_clear()\nbefore doing that to make sure that the pipe is disconnected from any\nnotification sources first.\n\nFixes: c73be61cede5 (\"pipe: Add general notification queue support\")\nReported-by: Jann Horn \u003cjannh@google.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d6d4019ba32f558ba1012c297fa1880fc03aa90c",
      "old_mode": 33188,
      "old_path": "fs/pipe.c",
      "new_id": "02d744b517a0a5f6a8656335e8dbd12b00b2171a",
      "new_mode": 33188,
      "new_path": "fs/pipe.c"
    }
  ]
}