The rpc_pipefs code isn't thread safe, leading to occasional use after frees when running xfstests generic/241 (dbench). Signed-off-by: Christoph Hellwig <hch@lst.de> Link: http://lkml.kernel.org/r/1411740170-18611-2-git-send-email-hch@lst.de Cc: stable@vger.kernel.org # 3.17.x Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com>
		
			
				
	
	
		
			40 lines
		
	
	
	
		
			902 B
			
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			40 lines
		
	
	
	
		
			902 B
			
		
	
	
	
		
			C
		
	
	
	
	
	
/*
 | 
						|
 * NFS-private data for each "struct net".  Accessed with net_generic().
 | 
						|
 */
 | 
						|
 | 
						|
#ifndef __NFS_NETNS_H__
 | 
						|
#define __NFS_NETNS_H__
 | 
						|
 | 
						|
#include <linux/nfs4.h>
 | 
						|
#include <net/net_namespace.h>
 | 
						|
#include <net/netns/generic.h>
 | 
						|
 | 
						|
struct bl_dev_msg {
 | 
						|
	int32_t status;
 | 
						|
	uint32_t major, minor;
 | 
						|
};
 | 
						|
 | 
						|
struct nfs_net {
 | 
						|
	struct cache_detail *nfs_dns_resolve;
 | 
						|
	struct rpc_pipe *bl_device_pipe;
 | 
						|
	struct bl_dev_msg bl_mount_reply;
 | 
						|
	wait_queue_head_t bl_wq;
 | 
						|
	struct mutex bl_mutex;
 | 
						|
	struct list_head nfs_client_list;
 | 
						|
	struct list_head nfs_volume_list;
 | 
						|
#if IS_ENABLED(CONFIG_NFS_V4)
 | 
						|
	struct idr cb_ident_idr; /* Protected by nfs_client_lock */
 | 
						|
	unsigned short nfs_callback_tcpport;
 | 
						|
	unsigned short nfs_callback_tcpport6;
 | 
						|
	int cb_users[NFS4_MAX_MINOR_VERSION + 1];
 | 
						|
#endif
 | 
						|
	spinlock_t nfs_client_lock;
 | 
						|
	struct timespec boot_time;
 | 
						|
#ifdef CONFIG_PROC_FS
 | 
						|
	struct proc_dir_entry *proc_nfsfs;
 | 
						|
#endif
 | 
						|
};
 | 
						|
 | 
						|
extern int nfs_net_id;
 | 
						|
 | 
						|
#endif
 |