SUNRPC: Ensure that gss_auth isn't freed before its upcall messages
authorTrond Myklebust <trond.myklebust@primarydata.com>
Sun, 16 Feb 2014 17:14:13 +0000 (12:14 -0500)
committerTrond Myklebust <trond.myklebust@primarydata.com>
Sun, 16 Feb 2014 18:06:06 +0000 (13:06 -0500)
Fix a race in which the RPC client is shutting down while the
gss daemon is processing a downcall. If the RPC client manages to
shut down before the gss daemon is done, then the struct gss_auth
used in gss_release_msg() may have already been freed.

Link: http://lkml.kernel.org/r/1392494917.71728.YahooMailNeo@web140002.mail.bf1.yahoo.com
Reported-by: John <da_audiophile@yahoo.com>
Reported-by: Borislav Petkov <bp@alien8.de>
Cc: stable@vger.kernel.org # 3.12+
Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
net/sunrpc/auth_gss/auth_gss.c

Simple merge