The patch titled
     NLM: Fix double free in __nlm_async_call
has been removed from the -mm tree.  Its filename was
     nlm-fix-double-free-in-__nlm_async_call.patch

This patch was dropped because it was merged into mainline or a subsystem tree

------------------------------------------------------
Subject: NLM: Fix double free in __nlm_async_call
From: Trond Myklebust <[EMAIL PROTECTED]>

rpc_call_async() will always call rpc_release_calldata(), so it is an
error for __nlm_async_call() to do so as well.

Addresses http://bugzilla.kernel.org/show_bug.cgi?id=7923

Signed-off-by: Trond Myklebust <[EMAIL PROTECTED]>
Cc: Jan "Yenya" Kasprzak <[EMAIL PROTECTED]>
Cc: Neil Brown <[EMAIL PROTECTED]>
Signed-off-by: Andrew Morton <[EMAIL PROTECTED]>
---

 fs/lockd/clntproc.c |    9 +++------
 fs/lockd/svclock.c  |    4 +---
 2 files changed, 4 insertions(+), 9 deletions(-)

diff -puN fs/lockd/clntproc.c~nlm-fix-double-free-in-__nlm_async_call 
fs/lockd/clntproc.c
--- a/fs/lockd/clntproc.c~nlm-fix-double-free-in-__nlm_async_call
+++ a/fs/lockd/clntproc.c
@@ -361,7 +361,6 @@ static int __nlm_async_call(struct nlm_r
 {
        struct nlm_host *host = req->a_host;
        struct rpc_clnt *clnt;
-       int status = -ENOLCK;
 
        dprintk("lockd: call procedure %d on %s (async)\n",
                        (int)proc, host->h_name);
@@ -373,12 +372,10 @@ static int __nlm_async_call(struct nlm_r
        msg->rpc_proc = &clnt->cl_procinfo[proc];
 
         /* bootstrap and kick off the async RPC call */
-        status = rpc_call_async(clnt, msg, RPC_TASK_ASYNC, tk_ops, req);
-       if (status == 0)
-               return 0;
+        return rpc_call_async(clnt, msg, RPC_TASK_ASYNC, tk_ops, req);
 out_err:
-       nlm_release_call(req);
-       return status;
+       tk_ops->rpc_release(req);
+       return -ENOLCK;
 }
 
 int nlm_async_call(struct nlm_rqst *req, u32 proc, const struct rpc_call_ops 
*tk_ops)
diff -puN fs/lockd/svclock.c~nlm-fix-double-free-in-__nlm_async_call 
fs/lockd/svclock.c
--- a/fs/lockd/svclock.c~nlm-fix-double-free-in-__nlm_async_call
+++ a/fs/lockd/svclock.c
@@ -593,9 +593,7 @@ callback:
 
        /* Call the client */
        kref_get(&block->b_count);
-       if (nlm_async_call(block->b_call, NLMPROC_GRANTED_MSG,
-                                               &nlmsvc_grant_ops) < 0)
-               nlmsvc_release_block(block);
+       nlm_async_call(block->b_call, NLMPROC_GRANTED_MSG, &nlmsvc_grant_ops);
 }
 
 /*
_

Patches currently in -mm which might be from [EMAIL PROTECTED] are

nlm-fix-double-free-in-__nlm_async_call.patch
git-nfs.patch
auth_gss-unregister-gss_domain-when-unloading-module.patch
nfs-kill-the-obsolete-nfs_paranoia.patch

-
To unsubscribe from this list: send the line "unsubscribe mm-commits" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to