From: Trond Myklebust Date: Sat, 1 Feb 2014 19:53:23 +0000 (-0500) Subject: NFSv4: Fix memory corruption in nfs4_proc_open_confirm X-Git-Tag: v3.14-rc2~29^2~2 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=17ead6c85c3d0ef57a14d1373f1f1cee2ce60ea8;p=pandora-kernel.git NFSv4: Fix memory corruption in nfs4_proc_open_confirm nfs41_wake_and_assign_slot() relies on the task->tk_msg.rpc_argp and task->tk_msg.rpc_resp always pointing to the session sequence arguments. nfs4_proc_open_confirm tries to pull a fast one by reusing the open sequence structure, thus causing corruption of the NFSv4 slot table. Cc: stable@vger.kernel.org # 3.12+ Signed-off-by: Trond Myklebust --- Reading git-diff-tree failed