diff options
author | J. Bruce Fields <bfields@redhat.com> | 2011-06-29 20:49:04 (GMT) |
---|---|---|
committer | J. Bruce Fields <bfields@redhat.com> | 2011-07-15 22:58:46 (GMT) |
commit | ebc63e531cc6a457595dd110b07ac530eae788c3 (patch) | |
tree | 36f0775d56a045f54389dc7559e0ce3b5295a5e5 /fs/nfsd/xdr4.h | |
parent | 058c5c99999609e3de7e15b49049665f02d06577 (diff) | |
download | linux-ebc63e531cc6a457595dd110b07ac530eae788c3.tar.xz |
svcrpc: fix list-corrupting race on nfsd shutdown
After commit 3262c816a3d7fb1eaabce633caa317887ed549ae "[PATCH] knfsd:
split svc_serv into pools", svc_delete_xprt (then svc_delete_socket) no
longer removed its xpt_ready (then sk_ready) field from whatever list it
was on, noting that there was no point since the whole list was about to
be destroyed anyway.
That was mostly true, but forgot that a few svc_xprt_enqueue()'s might
still be hanging around playing with the about-to-be-destroyed list, and
could get themselves into trouble writing to freed memory if we left
this xprt on the list after freeing it.
(This is actually functionally identical to a patch made first by Ben
Greear, but with more comments.)
Cc: stable@kernel.org
Cc: gnb@fmeh.org
Reported-by: Ben Greear <greearb@candelatech.com>
Tested-by: Ben Greear <greearb@candelatech.com>
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Diffstat (limited to 'fs/nfsd/xdr4.h')
0 files changed, 0 insertions, 0 deletions