projects / GitHub / LineageOS / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cdead7c) | patch
SUNRPC: Fix a use after free bug with the NFSv4.1 backchannel
authorTrond Myklebust <Trond.Myklebust@netapp.com>
Fri, 19 Mar 2010 19:36:22 +0000 (15:36 -0400)
committerTrond Myklebust <Trond.Myklebust@netapp.com>
Mon, 22 Mar 2010 09:32:44 +0000 (05:32 -0400)
commitc9acb42ef1904d15d0fb315061cefbe638f67f3a
tree7c94dff168dfc90a279990cb2860cce626ae76a3tree | snapshot (tar.gz zip)
parentcdead7cf12896c0e50a8be2e52de52c364603095commit | diff
SUNRPC: Fix a use after free bug with the NFSv4.1 backchannel

The ->release_request() callback was designed to allow the transport layer
to do housekeeping after the RPC call is done. It cannot be used to free
the request itself, and doing so leads to a use-after-free bug in
xprt_release().

Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
include/linux/sunrpc/bc_xprt.h diff | blob | blame | history
net/sunrpc/bc_svc.c diff | blob | blame | history
net/sunrpc/xprt.c diff | blob | blame | history
net/sunrpc/xprtsock.c diff | blob | blame | history