J. Bruce Fields 164f98adbb lockd: fix race in nlm_release()
The sm_count is decremented to zero but left on the nsm_handles list.
So in the space between decrementing sm_count and acquiring nsm_mutex,
it is possible for another task to find this nsm_handle, increment the
use count and then enter nsm_release itself.

Thus there's nothing to prevent the nsm being freed before we acquire
nsm_mutex here.

Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>
2008-04-23 16:13:39 -04:00
..
2008-02-08 09:22:39 -08:00
2008-02-08 09:22:39 -08:00
2008-02-08 09:22:40 -08:00
2008-02-14 21:13:33 -08:00
2008-02-08 09:22:40 -08:00
2008-03-30 14:20:23 -07:00
2008-02-14 21:13:33 -08:00
2008-02-14 21:13:33 -08:00
2008-03-04 14:47:06 -08:00
2008-02-08 09:22:40 -08:00
2007-10-22 08:13:21 -07:00
2008-02-23 17:12:13 -08:00
2008-04-21 11:22:28 -05:00
2008-02-08 09:22:40 -08:00
2008-03-19 06:42:18 -04:00
2008-03-30 14:18:41 -07:00
2008-03-30 14:18:41 -07:00
2008-04-23 16:13:39 -04:00
2008-04-23 16:13:38 -04:00
2007-10-18 14:37:31 -07:00
2008-03-30 14:18:41 -07:00
2008-04-11 08:06:43 -07:00
2008-03-04 16:35:10 -08:00
2008-01-30 13:31:46 +01:00
2008-02-05 09:44:07 -08:00
2007-05-21 09:18:19 -07:00
2007-05-08 11:15:01 -07:00
2008-02-14 21:13:33 -08:00
2008-02-06 10:41:07 -08:00
2008-01-30 13:31:46 +01:00
2008-02-14 21:13:33 -08:00
2008-04-21 22:15:06 +00:00
2008-02-14 21:13:33 -08:00
2008-02-05 09:44:07 -08:00