[Sheepdog] [PATCH 5/7] sheep: fix wrong free order of the request structure

[MORITA Kazutaka]

req->r_siblings could be linked to the list_head member in req->ci, so
we cannot free req->ci before freeing req.

Signed-off-by: MORITA Kazutaka <morita.kazutaka at lab.ntt.co.jp>
---
 sheep/sdnet.c |    8 +++++---
 1 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/sheep/sdnet.c b/sheep/sdnet.c
index 784adc2..aae4df4 100644
--- a/sheep/sdnet.c
+++ b/sheep/sdnet.c
@@ -345,16 +345,18 @@ static void free_request(struct request *req)
 static void req_done(struct request *req)
 {
 	int dead = 0;
+	struct client_info *ci = req->ci;
 
-	if (conn_tx_on(&req->ci->conn)) {
+	if (conn_tx_on(&ci->conn)) {
 		dprintf("connection seems to be dead\n");
 		dead = 1;
 	} else
-		list_add(&req->r_wlist, &req->ci->done_reqs);
-	client_decref(req->ci);
+		list_add(&req->r_wlist, &ci->done_reqs);
 
 	if (dead)
 		free_request(req);
+
+	client_decref(ci);
 }
 
 static void init_rx_hdr(struct client_info *ci)
-- 
1.7.2.5