Re: [PATCH] NFSD: fix use-after-free in nfsd4_ssc_setup_dul()

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




> On Jan 11, 2023, at 11:24 AM, Xingyuan Mo <hdthky0@xxxxxxxxx> wrote:
> 
> If signal_pending() returns true, schedule_timeout() will not be executed,
> causing the waiting task to remain in the wait queue.
> Fixed by adding a call to finish_wait(), which ensures that the waiting
> task will always be removed from the wait queue.
> 
> Reported-by: Xingyuan Mo <hdthky0@xxxxxxxxx>
> Signed-off-by: Xingyuan Mo <hdthky0@xxxxxxxxx>

Hello, applied to nfsd's for-rc, thanks! I expect to send a PR for to Linus
in a few days.


> ---
> fs/nfsd/nfs4proc.c | 1 +
> 1 file changed, 1 insertion(+)
> 
> diff --git a/fs/nfsd/nfs4proc.c b/fs/nfsd/nfs4proc.c
> index bd880d55f565..3fa819e29b3f 100644
> --- a/fs/nfsd/nfs4proc.c
> +++ b/fs/nfsd/nfs4proc.c
> @@ -1318,6 +1318,7 @@ static __be32 nfsd4_ssc_setup_dul(struct nfsd_net *nn, char *ipaddr,
> 			/* allow 20secs for mount/unmount for now - revisit */
> 			if (signal_pending(current) ||
> 					(schedule_timeout(20*HZ) == 0)) {
> +				finish_wait(&nn->nfsd_ssc_waitq, &wait);
> 				kfree(work);
> 				return nfserr_eagain;
> 			}
> -- 
> 2.34.1
> 

--
Chuck Lever







[Index of Archives]     [Linux Filesystem Development]     [Linux USB Development]     [Linux Media Development]     [Video for Linux]     [Linux NILFS]     [Linux Audio Users]     [Yosemite Info]     [Linux SCSI]

  Powered by Linux