Dai Ngo 650b69b17c NFSD: fix use-after-free in __nfs42_ssc_open()
[ Upstream commit 75333d48f92256a0dec91dbf07835e804fc411c0 ]

Problem caused by source's vfsmount being unmounted but remains
on the delayed unmount list. This happens when nfs42_ssc_open()
return errors.

Fixed by removing nfsd4_interssc_connect(), leave the vfsmount
for the laundromat to unmount when idle time expires.

We don't need to call nfs_do_sb_deactive when nfs42_ssc_open
return errors since the file was not opened so nfs_server->active
was not incremented. Same as in nfsd4_copy, if we fail to
launch nfsd4_do_async_copy thread then there's no need to
call nfs_do_sb_deactive

Reported-by: Xingyuan Mo <hdthky0@gmail.com>
Signed-off-by: Dai Ngo <dai.ngo@oracle.com>
Tested-by: Xingyuan Mo <hdthky0@gmail.com>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-01-04 11:28:58 +01:00
..
2022-02-02 07:49:59 -07:00
2021-12-03 18:44:06 +01:00
2021-01-25 09:36:28 -05:00
2022-03-11 10:25:14 -05:00
2021-10-02 15:51:10 -04:00
2022-03-11 10:25:14 -05:00
2022-09-26 14:02:47 -04:00
2022-10-06 17:13:18 -07:00
2022-09-26 14:02:47 -04:00
2021-12-13 13:42:51 -05:00
2022-11-27 12:40:06 -08:00
2022-09-26 14:02:49 -04:00
2018-09-25 20:34:54 -04:00