Linux/linux bd17193fs/nfs nfs4proc.c

NFSv4.1: Fix a race in nfs4_proc_layoutget

If the task calling layoutget is signalled, then it is possible for the
calls to nfs4_sequence_free_slot() and nfs4_layoutget_prepare() to race,
in which case we leak a slot.
The fix is to move the call to nfs4_sequence_free_slot() into the
nfs4_layoutget_release() so that it gets called at task teardown time.

Fixes: 2e80dbe7ac51 ("NFSv4.1: Close callback races for OPEN, LAYOUTGET...")
Cc: stable at vger.kernel.org # v4.8+
Signed-off-by: Trond Myklebust <trond.myklebust at primarydata.com>
DeltaFile
+1-1fs/nfs/nfs4proc.c
+1-11 files

UnifiedSplitRaw