diff options
| author | NeilBrown <[email protected]> | 2020-05-08 21:25:11 +0000 |
|---|---|---|
| committer | Trond Myklebust <[email protected]> | 2020-05-10 23:44:56 +0000 |
| commit | 31e9a7f353526bbe53165a292f8ea9695ead3168 (patch) | |
| tree | 4339dc18ed5b5290b666579f6c92f6167f14043e /tools/perf/scripts/python/mem-phys-addr.py | |
| parent | Linux 5.7-rc5 (diff) | |
| download | kernel-31e9a7f353526bbe53165a292f8ea9695ead3168.tar.gz kernel-31e9a7f353526bbe53165a292f8ea9695ead3168.zip | |
SUNRPC: fix use-after-free in rpc_free_client_work()
Parts of rpc_free_client() were recently moved to
a separate rpc_free_clent_work(). This introduced
a use-after-free as rpc_clnt_remove_pipedir() calls
rpc_net_ns(), and that uses clnt->cl_xprt which has already
been freed.
So move the call to xprt_put() after the call to
rpc_clnt_remove_pipedir().
Reported-by: [email protected]
Fixes: 7c4310ff5642 ("SUNRPC: defer slow parts of rpc_free_client() to a workqueue.")
Signed-off-by: NeilBrown <[email protected]>
Signed-off-by: Trond Myklebust <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python/mem-phys-addr.py')
0 files changed, 0 insertions, 0 deletions