This is a note to let you know that I've just added the patch titled NFSv4: Fix another bug in the close/open_downgrade code to the 3.16-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: nfsv4-fix-another-bug-in-the-close-open_downgrade-code.patch and it can be found in the queue-3.16 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From cd9288ffaea4359d5cfe2b8d264911506aed26a4 Mon Sep 17 00:00:00 2001 From: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> Date: Thu, 18 Sep 2014 11:51:32 -0400 Subject: NFSv4: Fix another bug in the close/open_downgrade code From: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> commit cd9288ffaea4359d5cfe2b8d264911506aed26a4 upstream. James Drew reports another bug whereby the NFS client is now sending an OPEN_DOWNGRADE in a situation where it should really have sent a CLOSE: the client is opening the file for O_RDWR, but then trying to do a downgrade to O_RDONLY, which is not allowed by the NFSv4 spec. Reported-by: James Drews <drews@xxxxxxxxxxxxx> Link: http://lkml.kernel.org/r/541AD7E5.8020409@xxxxxxxxxxxxx Fixes: aee7af356e15 (NFSv4: Fix problems with close in the presence...) Signed-off-by: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- fs/nfs/nfs4proc.c | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) --- a/fs/nfs/nfs4proc.c +++ b/fs/nfs/nfs4proc.c @@ -2599,23 +2599,23 @@ static void nfs4_close_prepare(struct rp is_rdwr = test_bit(NFS_O_RDWR_STATE, &state->flags); is_rdonly = test_bit(NFS_O_RDONLY_STATE, &state->flags); is_wronly = test_bit(NFS_O_WRONLY_STATE, &state->flags); - /* Calculate the current open share mode */ - calldata->arg.fmode = 0; - if (is_rdonly || is_rdwr) - calldata->arg.fmode |= FMODE_READ; - if (is_wronly || is_rdwr) - calldata->arg.fmode |= FMODE_WRITE; /* Calculate the change in open mode */ + calldata->arg.fmode = 0; if (state->n_rdwr == 0) { - if (state->n_rdonly == 0) { - call_close |= is_rdonly || is_rdwr; - calldata->arg.fmode &= ~FMODE_READ; - } - if (state->n_wronly == 0) { - call_close |= is_wronly || is_rdwr; - calldata->arg.fmode &= ~FMODE_WRITE; - } - } + if (state->n_rdonly == 0) + call_close |= is_rdonly; + else if (is_rdonly) + calldata->arg.fmode |= FMODE_READ; + if (state->n_wronly == 0) + call_close |= is_wronly; + else if (is_wronly) + calldata->arg.fmode |= FMODE_WRITE; + } else if (is_rdwr) + calldata->arg.fmode |= FMODE_READ|FMODE_WRITE; + + if (calldata->arg.fmode == 0) + call_close |= is_rdwr; + if (!nfs4_valid_open_stateid(state)) call_close = 0; spin_unlock(&state->owner->so_lock); Patches currently in stable-queue which might be from trond.myklebust@xxxxxxxxxxxxxxx are queue-3.16/nfs-move-nfs_pgio_data-and-remove-nfs_rw_header.patch queue-3.16/nfs-use-blocking-page_group_lock-in-add_request.patch queue-3.16/nfs-remove-pgio_header-refcount-related-cleanup.patch queue-3.16/pnfs-add-pnfs_put_lseg_async.patch queue-3.16/nfs-can_coalesce_requests-must-enforce-contiguity.patch queue-3.16/nfs-disallow-duplicate-pages-in-pgio-page-vectors.patch queue-3.16/nfs-fix-error-handling-in-lock_and_join_requests.patch queue-3.16/nfs-change-nfs_page_group_lock-argument.patch queue-3.16/nfsv4-nfs4_state_manager-vs.-nfs_server_remove_lists.patch queue-3.16/nfsv4-fix-another-bug-in-the-close-open_downgrade-code.patch queue-3.16/nfs-check-wait_on_bit_lock-err-in-page_group_lock.patch queue-3.16/nfs-don-t-sleep-with-inode-lock-in-lock_and_join_requests.patch queue-3.16/nfs-rename-members-of-nfs_pgio_data.patch queue-3.16/nfs-fix-nonblocking-calls-to-nfs_page_group_lock.patch queue-3.16/nfs-merge-nfs_pgio_data-into-_header.patch queue-3.16/nfs-clear_request_commit-while-holding-i_lock.patch -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html