summaryrefslogtreecommitdiffstats
path: root/fs/nfsd/nfs4xdr.c
diff options
context:
space:
mode:
authorJ. Bruce Fields <bfields@redhat.com>2011-06-29 22:49:04 +0200
committerJ. Bruce Fields <bfields@redhat.com>2011-07-16 00:58:46 +0200
commitebc63e531cc6a457595dd110b07ac530eae788c3 (patch)
tree36f0775d56a045f54389dc7559e0ce3b5295a5e5 /fs/nfsd/nfs4xdr.c
parentrpc: allow autoloading of gss mechanisms (diff)
downloadlinux-ebc63e531cc6a457595dd110b07ac530eae788c3.tar.xz
linux-ebc63e531cc6a457595dd110b07ac530eae788c3.zip
svcrpc: fix list-corrupting race on nfsd shutdown
After commit 3262c816a3d7fb1eaabce633caa317887ed549ae "[PATCH] knfsd: split svc_serv into pools", svc_delete_xprt (then svc_delete_socket) no longer removed its xpt_ready (then sk_ready) field from whatever list it was on, noting that there was no point since the whole list was about to be destroyed anyway. That was mostly true, but forgot that a few svc_xprt_enqueue()'s might still be hanging around playing with the about-to-be-destroyed list, and could get themselves into trouble writing to freed memory if we left this xprt on the list after freeing it. (This is actually functionally identical to a patch made first by Ben Greear, but with more comments.) Cc: stable@kernel.org Cc: gnb@fmeh.org Reported-by: Ben Greear <greearb@candelatech.com> Tested-by: Ben Greear <greearb@candelatech.com> Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Diffstat (limited to 'fs/nfsd/nfs4xdr.c')
0 files changed, 0 insertions, 0 deletions