diff options
| author | Anna Schumaker <Anna.Schumaker@Netapp.com> | 2021-05-19 12:54:51 -0400 |
|---|---|---|
| committer | Trond Myklebust <trond.myklebust@hammerspace.com> | 2021-05-20 12:17:08 -0400 |
| commit | a421d218603ffa822a0b8045055c03eae394a7eb (patch) | |
| tree | d28e45b50533395e3872e99c6d88387da2972ee5 /net/sunrpc | |
| parent | e877a88d1f069edced4160792f42c2a8e2dba942 (diff) | |
| download | lwn-a421d218603ffa822a0b8045055c03eae394a7eb.tar.gz lwn-a421d218603ffa822a0b8045055c03eae394a7eb.zip | |
NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
Commit de144ff4234f changes _pnfs_return_layout() to call
pnfs_mark_matching_lsegs_return() passing NULL as the struct
pnfs_layout_range argument. Unfortunately,
pnfs_mark_matching_lsegs_return() doesn't check if we have a value here
before dereferencing it, causing an oops.
I'm able to hit this crash consistently when running connectathon basic
tests on NFS v4.1/v4.2 against Ontap.
Fixes: de144ff4234f ("NFSv4: Don't discard segments marked for return in _pnfs_return_layout()")
Cc: stable@vger.kernel.org
Signed-off-by: Anna Schumaker <Anna.Schumaker@Netapp.com>
Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>
Diffstat (limited to 'net/sunrpc')
0 files changed, 0 insertions, 0 deletions