]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ecaf743) | patch
NFSv4/pnfs: Fix a use-after-free bug in open
authorTrond Myklebust <trond.myklebust@hammerspace.com>
Tue, 2 Aug 2022 19:48:50 +0000 (15:48 -0400)
committerTrond Myklebust <trond.myklebust@hammerspace.com>
Tue, 2 Aug 2022 20:04:29 +0000 (16:04 -0400)
commit1fb7932ae859c3a433e847cbda2039119d0e4c90
tree40de065272da66c7f812fc3403a5c4f93d1f5a7etree | snapshot
parentecaf74320f2fd7942d61782af3dedb25300a2836commit | diff
NFSv4/pnfs: Fix a use-after-free bug in open

If someone cancels the open RPC call, then we must not try to free
either the open slot or the layoutget operation arguments, since they
are likely still in use by the hung RPC call.

Fixes: 0f708016b758 ("NFSv4: Don't hold the layoutget locks across multiple RPC calls")
Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>
fs/nfs/nfs4proc.c diff | blob | history
Linux Kernel Source Tree.