| commit | bfa71434e40f632d466ce7b57857f1e159c4605e | |
| author | Ben Greear <greearb@candelatech.com> | |
| Tue, 12 Jul 2011 17:27:55 +0000 (12 10:27 -0700) | ||
| committer | Greg Kroah-Hartman <gregkh@suse.de> | |
| Wed, 3 Aug 2011 19:42:35 +0000 (3 12:42 -0700) | ||
| tree | eaebfe106a2dab329ccab959121e23cc23d23e82 | treesnapshot (tar.gz zip) |
| parent | 7d95a21c6893359dd0bc29663e2ad5554c1a6ed2 | commitdiff |
SUNRPC: Fix use of static variable in rpcb_getport_async
commit ec0dd267bf7d08cb30e321e45a75fd40edd7e528 upstream.
Because struct rpcbind_args *map was declared static, if two
threads entered this method at the same time, the values
assigned to map could be sent two two differen tasks.
This could cause all sorts of problems, include use-after-free
and double-free of memory.
Fix this by removing the static declaration so that the map
pointer is on the stack.
Signed-off-by: Ben Greear <greearb@candelatech.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
commit ec0dd267bf7d08cb30e321e45a75fd40edd7e528 upstream.
Because struct rpcbind_args *map was declared static, if two
threads entered this method at the same time, the values
assigned to map could be sent two two differen tasks.
This could cause all sorts of problems, include use-after-free
and double-free of memory.
Fix this by removing the static declaration so that the map
pointer is on the stack.
Signed-off-by: Ben Greear <greearb@candelatech.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
| net/sunrpc/rpcb_clnt.c | diffblobblamehistory |