lkml.org 
[lkml]   [2011]   [Aug]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    Date
    From
    Subject[06/50] SUNRPC: Fix use of static variable in rpcb_getport_async
    2.6.33-longterm review patch.  If anyone has any objections, please let us know.

    ------------------

    From: Ben Greear <greearb@candelatech.com>

    commit ec0dd267bf7d08cb30e321e45a75fd40edd7e528 upstream.

    Because struct rpcbind_args *map was declared static, if two
    threads entered this method at the same time, the values
    assigned to map could be sent two two differen tasks.
    This could cause all sorts of problems, include use-after-free
    and double-free of memory.

    Fix this by removing the static declaration so that the map
    pointer is on the stack.

    Signed-off-by: Ben Greear <greearb@candelatech.com>
    Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

    ---
    net/sunrpc/rpcb_clnt.c | 2 +-
    1 file changed, 1 insertion(+), 1 deletion(-)

    --- a/net/sunrpc/rpcb_clnt.c
    +++ b/net/sunrpc/rpcb_clnt.c
    @@ -579,7 +579,7 @@ void rpcb_getport_async(struct rpc_task
    u32 bind_version;
    struct rpc_xprt *xprt;
    struct rpc_clnt *rpcb_clnt;
    - static struct rpcbind_args *map;
    + struct rpcbind_args *map;
    struct rpc_task *child;
    struct sockaddr_storage addr;
    struct sockaddr *sap = (struct sockaddr *)&addr;



    \
     
     \ /
      Last update: 2011-08-06 02:17    [W:0.020 / U:90.564 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site