Files
linux/include
Trond Myklebust 8b44deea79 NFSv4: Fix memory corruption in nfs4_proc_open_confirm
commit 17ead6c85c upstream.

nfs41_wake_and_assign_slot() relies on the task->tk_msg.rpc_argp and
task->tk_msg.rpc_resp always pointing to the session sequence arguments.

nfs4_proc_open_confirm tries to pull a fast one by reusing the open
sequence structure, thus causing corruption of the NFSv4 slot table.

Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2014-02-20 11:10:07 -08:00
..
2013-12-23 10:03:41 -05:00
2013-04-30 17:04:09 -07:00