librbd: only erase IO events after they are marked safe

Signed-off-by: Jason Dillaman <dillaman@redhat.com>

diff --git a/src/librbd/Journal.cc b/src/librbd/Journal.cc
index 737a120f5a5bc1b921e80437b5ebd8457f26a25f..ca4221e11a756ae3070c0702833fbc984705a4ab 100644 (file)
--- a/src/librbd/Journal.cc
+++ b/src/librbd/Journal.cc
@@ -357,7 +357,9 @@ void Journal::complete_event(Events::iterator it, int r) {
                  << "r=" << r << dendl;
 
   m_journaler->committed(it->second.future);
-  m_events.erase(it);
+  if (it->second.safe) {
+    m_events.erase(it);
+  }
 }
 
 void Journal::handle_initialized(int r) {