diff options
author | Trond Myklebust | 2014-02-16 18:14:13 +0100 |
---|---|---|
committer | Trond Myklebust | 2014-02-16 19:06:06 +0100 |
commit | 9eb2ddb48ce3a7bd745c14a933112994647fa3cd (patch) | |
tree | 3ddc95def93147d05ea19eb623d97e3d984e6773 /net/tipc/msg.h | |
parent | SUNRPC: Fix potential memory scribble in xprt_free_bc_request() (diff) | |
download | kernel-qcow2-linux-9eb2ddb48ce3a7bd745c14a933112994647fa3cd.tar.gz kernel-qcow2-linux-9eb2ddb48ce3a7bd745c14a933112994647fa3cd.tar.xz kernel-qcow2-linux-9eb2ddb48ce3a7bd745c14a933112994647fa3cd.zip |
SUNRPC: Ensure that gss_auth isn't freed before its upcall messages
Fix a race in which the RPC client is shutting down while the
gss daemon is processing a downcall. If the RPC client manages to
shut down before the gss daemon is done, then the struct gss_auth
used in gss_release_msg() may have already been freed.
Link: http://lkml.kernel.org/r/1392494917.71728.YahooMailNeo@web140002.mail.bf1.yahoo.com
Reported-by: John <da_audiophile@yahoo.com>
Reported-by: Borislav Petkov <bp@alien8.de>
Cc: stable@vger.kernel.org # 3.12+
Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
Diffstat (limited to 'net/tipc/msg.h')
0 files changed, 0 insertions, 0 deletions