cifs: Fix use-after-free on mid_q_entry

Browse source

With CIFS_DEBUG_2 enabled, additional debug information is tracked inside each
mid_q_entry struct, however cifs_save_when_sent may use the mid_q_entry after it
has been freed from the appropriate callback if the transport layer has very low
latency. Holding the srv_mutex fixes this use-after-free, as cifs_save_when_sent
is called while the srv_mutex is held while the request is sent.

Signed-off-by: Christopher Oo <t-chriso@microsoft.com>

...

This commit is contained in:

Christopher Oo 2015-06-25 16:10:48 -07:00 • committed by Steve French

parent 0a6d0b6412

commit 5fb4e288a0

3 changed files with 16 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

7

fs/cifs/cifssmb.c

View file

7

fs/cifs/smb2pdu.c

View file

2

fs/cifs/transport.c

View file