summaryrefslogtreecommitdiffstats
path: root/fs/nfs/internal.h
diff options
context:
space:
mode:
authorNeilBrown <neilb@suse.de>2012-12-13 05:14:36 +0100
committerTrond Myklebust <Trond.Myklebust@netapp.com>2012-12-13 05:55:56 +0100
commitf259613a1e4b44a0cf85a5dafd931be96ee7c9e5 (patch)
tree032efdf98b5335c172b72a7659e25cde901530be /fs/nfs/internal.h
parentSUNRPC handle EKEYEXPIRED in call_refreshresult (diff)
downloadlinux-f259613a1e4b44a0cf85a5dafd931be96ee7c9e5.tar.xz
linux-f259613a1e4b44a0cf85a5dafd931be96ee7c9e5.zip
NFS: avoid NULL dereference in nfs_destroy_server
In rare circumstances, nfs_clone_server() of a v2 or v3 server can get an error between setting server->destory (to nfs_destroy_server), and calling nfs_start_lockd (which will set server->nlm_host). If this happens, nfs_clone_server will call nfs_free_server which will call nfs_destroy_server and thence nlmclnt_done(NULL). This causes the NULL to be dereferenced. So add a guard to only call nlmclnt_done() if ->nlm_host is not NULL. The other guards there are irrelevant as nlm_host can only be non-NULL if one of these flags are set - so remove those tests. (Thanks to Trond for this suggestion). This is suitable for any stable kernel since 2.6.25. Cc: stable@vger.kernel.org Signed-off-by: NeilBrown <neilb@suse.de> Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
Diffstat (limited to 'fs/nfs/internal.h')
0 files changed, 0 insertions, 0 deletions