(diskfs_nput): It's not valid to touch *NP (by `mutex_unlock

(&np->lock);') after we have called diskfs_drop_node.  So don't do it
in that case.

1 files changed, 5 insertions, 2 deletions

diff --git a/libdiskfs/diskfs.h b/libdiskfs/diskfs.h
index c7a3c4a4..3f4690c5 100644
--- a/libdiskfs/diskfs.h
+++ b/libdiskfs/diskfs.h
@@ -616,10 +616,13 @@ diskfs_nput (struct node *np)
 	  /* Now we can drop the reference back... */
 	  goto loop;
 	}
+      mutex_unlock (&np->lock);
     }
   else
-    spin_unlock (&diskfs_node_refcnt_lock);
-  mutex_unlock (&np->lock);
+    {
+      spin_unlock (&diskfs_node_refcnt_lock);
+      mutex_unlock (&np->lock);
+    }
 }
 
 /* Release a hard reference on NP.  If NP is locked by anyone, then