]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0c7e565) | patch
NFSv4/pnfs: Fix a use-after-free bug in open
authorTrond Myklebust <trond.myklebust@hammerspace.com>
Tue, 2 Aug 2022 19:48:50 +0000 (15:48 -0400)
committerTrond Myklebust <trond.myklebust@hammerspace.com>
Tue, 2 Aug 2022 20:04:29 +0000 (16:04 -0400)
commit8c1bddd5134a37040f4a8cb33b0bdce93705836a
tree40de065272da66c7f812fc3403a5c4f93d1f5a7etree | snapshot
parent0c7e565ee443326647b6702429daf7d20ce09ca7commit | diff
NFSv4/pnfs: Fix a use-after-free bug in open

If someone cancels the open RPC call, then we must not try to free
either the open slot or the layoutget operation arguments, since they
are likely still in use by the hung RPC call.

Fixes: 494f263f2a4a ("NFSv4: Don't hold the layoutget locks across multiple RPC calls")
Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>
fs/nfs/nfs4proc.c diff | blob | history
Linux Kernel Source Tree.