projects / GitHub / moto-9609 / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 91ab4b4) | patch
nfs4: start callback_ident at idr 1
authorBenjamin Coddington <bcodding@redhat.com>
Fri, 20 Nov 2015 14:56:20 +0000 (09:56 -0500)
committerTrond Myklebust <trond.myklebust@primarydata.com>
Tue, 24 Nov 2015 02:59:42 +0000 (21:59 -0500)
commitc68a027c05709330fe5b2f50c50d5fa02124b5d8
tree42a72e774e63306c52ecd51d9c2314209a50bed0tree | snapshot (tar.gz zip)
parent91ab4b4d16e6649fbbf65f303c0c4e20ed680bd1commit | diff
nfs4: start callback_ident at idr 1

If clp->cl_cb_ident is zero, then nfs_cb_idr_remove_locked() skips removing
it when the nfs_client is freed.  A decoding or server bug can then find
and try to put that first nfs_client which would lead to a crash.

Signed-off-by: Benjamin Coddington <bcodding@redhat.com>
Fixes: d6870312659d ("nfs4client: convert to idr_alloc()")
Cc: stable@vger.kernel.org
Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
fs/nfs/nfs4client.c diff | blob | blame | history