SUNRPC: Ensure that gss_auth isn't freed before its upcall messages
authorTrond Myklebust <trond.myklebust@primarydata.com>
Sun, 16 Feb 2014 17:14:13 +0000 (12:14 -0500)
committerJiri Slaby <jslaby@suse.cz>
Wed, 5 Mar 2014 16:13:45 +0000 (17:13 +0100)
commit9f93a183e6266283dce26ad92855ba7b7472c9cd
treece2ab634d2f0e2845a9931b47e8a97eab815277e
parentd1c07003693c1944ef9ee8ad484c61be61829ce7
SUNRPC: Ensure that gss_auth isn't freed before its upcall messages

commit 9eb2ddb48ce3a7bd745c14a933112994647fa3cd upstream.

Fix a race in which the RPC client is shutting down while the
gss daemon is processing a downcall. If the RPC client manages to
shut down before the gss daemon is done, then the struct gss_auth
used in gss_release_msg() may have already been freed.

Link: http://lkml.kernel.org/r/1392494917.71728.YahooMailNeo@web140002.mail.bf1.yahoo.com
Reported-by: John <da_audiophile@yahoo.com>
Reported-by: Borislav Petkov <bp@alien8.de>
Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
net/sunrpc/auth_gss/auth_gss.c