Scott Mayhew 576acc2591 nfs4: take a reference on the nfs_client when running FREE_STATEID
During umount, the session slot tables are freed.  If there are
outstanding FREE_STATEID tasks, a use-after-free and slab corruption can
occur when rpc_exit_task calls rpc_call_done -> nfs41_sequence_done ->
nfs4_sequence_process/nfs41_sequence_free_slot.

Prevent that from happening by taking a reference on the nfs_client in
nfs41_free_stateid and putting it in nfs41_free_stateid_release.

Signed-off-by: Scott Mayhew <smayhew@redhat.com>
Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>
2021-11-03 08:47:51 -04:00
..
2021-02-26 15:49:51 -07:00
2021-10-20 18:09:55 -04:00
2021-10-20 18:09:45 -04:00
2020-05-27 10:10:12 -04:00
2021-08-31 10:57:06 -07:00
2021-10-20 18:09:54 -04:00
2021-10-20 18:09:55 -04:00
2021-04-05 09:04:20 -04:00
2021-10-20 18:09:54 -04:00
2021-05-07 11:23:41 -07:00
2020-12-17 12:15:03 -08:00
2021-10-20 18:09:45 -04:00