projects / linux-2.6-block.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b1a28f2) | patch
NFSv4/pnfs: Fix a use-after-free bug in open
authorTrond Myklebust <trond.myklebust@hammerspace.com>
Tue, 2 Aug 2022 19:48:50 +0000 (15:48 -0400)
committerTrond Myklebust <trond.myklebust@hammerspace.com>
Tue, 2 Aug 2022 20:04:29 +0000 (16:04 -0400)
commit2135e5d56278ffdb1c2e6d325dc6b87f669b9dac
tree40de065272da66c7f812fc3403a5c4f93d1f5a7etree | snapshot
parentb1a28f2eb9ea7a5a1763fe53fe699aa0feae4231commit | diff
NFSv4/pnfs: Fix a use-after-free bug in open

If someone cancels the open RPC call, then we must not try to free
either the open slot or the layoutget operation arguments, since they
are likely still in use by the hung RPC call.

Fixes: 6949493884fe ("NFSv4: Don't hold the layoutget locks across multiple RPC calls")
Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>
fs/nfs/nfs4proc.c diff | blob | blame | history
Linux 6.x block layer and io_uring tree(s)