Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 18c1d28f authored by Trond Myklebust's avatar Trond Myklebust Committed by Greg Kroah-Hartman
Browse files

nfsd: Fix an Oops in free_session() 



commit bb6ad5572c0022e17e846b382d7413cdcf8055be upstream.

In call_xpt_users(), we delete the entry from the list, but we
do not reinitialise it. This triggers the list poisoning when
we later call unregister_xpt_user() in nfsd4_del_conns().

Signed-off-by: default avatarTrond Myklebust <trond.myklebust@hammerspace.com>
Cc: stable@vger.kernel.org
Signed-off-by: default avatarJ. Bruce Fields <bfields@redhat.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent b71f9663

net/sunrpc/svc_xprt.c

+1 −1
Original line number Diff line number Diff line
@@ -989,7 +989,7 @@ static void call_xpt_users(struct svc_xprt *xprt) 
	spin_lock(&xprt->xpt_lock);

	while (!list_empty(&xprt->xpt_users)) {

		u = list_first_entry(&xprt->xpt_users, struct svc_xpt_user, list);

		list_del(&u->list);

		list_del_init(&u->list);

		u->callback(u);

	}

	spin_unlock(&xprt->xpt_lock);