1. 15 1月, 2011 1 次提交
  2. 14 1月, 2011 1 次提交
  3. 12 1月, 2011 6 次提交
  4. 05 1月, 2011 2 次提交
  5. 17 12月, 2010 5 次提交
  6. 25 10月, 2010 1 次提交
  7. 21 10月, 2010 6 次提交
  8. 02 10月, 2010 8 次提交
  9. 08 9月, 2010 1 次提交
  10. 07 8月, 2010 1 次提交
    • B
      nfsd41: Fix a crash when a callback is retried · c18c821f
      Boaz Harrosh 提交于
      If a callback is retried at nfsd4_cb_recall_done() due to
      some error, the returned rpc reply crashes here:
      
      @@ -514,6 +514,7 @@ decode_cb_sequence(struct xdr_stream *xdr, struct nfsd4_cb_sequence *res,
       	u32 dummy;
       	__be32 *p;
      
       +	BUG_ON(!res);
       	if (res->cbs_minorversion == 0)
       		return 0;
      
      [BUG_ON added for demonstration]
      
      This is because the nfsd4_cb_done_sequence() has NULLed out
      the task->tk_msg.rpc_resp pointer.
      
      Also eventually the rpc would use the new slot without making
      sure it is free by calling nfsd41_cb_setup_sequence().
      
      This problem was introduced by a 4.1 protocol addition patch:
      	[0421b5c5] nfsd41: Backchannel: Implement cb_recall over NFSv4.1
      
      Which was overlooking the possibility of an RPC callback retries.
      For not-4.1 case redoing the _prepare is harmless.
      Signed-off-by: NBoaz Harrosh <bharrosh@panasas.com>
      Signed-off-by: NJ. Bruce Fields <bfields@redhat.com>
      c18c821f
  11. 25 6月, 2010 2 次提交
  12. 23 6月, 2010 1 次提交
  13. 01 6月, 2010 3 次提交
  14. 18 5月, 2010 1 次提交
  15. 13 5月, 2010 1 次提交