SUNRPC: Ensure that gss_auth isn't freed before its upcall messages
authorTrond Myklebust <trond.myklebust@primarydata.com>
Sun, 16 Feb 2014 17:14:13 +0000 (12:14 -0500)
committerTrond Myklebust <trond.myklebust@primarydata.com>
Sun, 16 Feb 2014 18:06:06 +0000 (13:06 -0500)
commit9eb2ddb48ce3a7bd745c14a933112994647fa3cd
tree3ddc95def93147d05ea19eb623d97e3d984e6773
parent628356791b04ea988fee070f66a748a823d001bb
SUNRPC: Ensure that gss_auth isn't freed before its upcall messages

Fix a race in which the RPC client is shutting down while the
gss daemon is processing a downcall. If the RPC client manages to
shut down before the gss daemon is done, then the struct gss_auth
used in gss_release_msg() may have already been freed.

Link: http://lkml.kernel.org/r/1392494917.71728.YahooMailNeo@web140002.mail.bf1.yahoo.com
Reported-by: John <da_audiophile@yahoo.com>
Reported-by: Borislav Petkov <bp@alien8.de>
Cc: stable@vger.kernel.org # 3.12+
Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
net/sunrpc/auth_gss/auth_gss.c