mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2024-12-24 03:24:55 +08:00
SUNRPC: Fix leak of krb5p encode pages
call_encode can be invoked more than once per RPC call. Ensure that each call to gss_wrap_req_priv does not overwrite pointers to previously allocated memory. Signed-off-by: Chuck Lever <chuck.lever@oracle.com> Cc: stable@kernel.org Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>
This commit is contained in:
parent
9bd11523dc
commit
8dae5398ab
@ -1791,6 +1791,7 @@ priv_release_snd_buf(struct rpc_rqst *rqstp)
|
||||
for (i=0; i < rqstp->rq_enc_pages_num; i++)
|
||||
__free_page(rqstp->rq_enc_pages[i]);
|
||||
kfree(rqstp->rq_enc_pages);
|
||||
rqstp->rq_release_snd_buf = NULL;
|
||||
}
|
||||
|
||||
static int
|
||||
@ -1799,6 +1800,9 @@ alloc_enc_pages(struct rpc_rqst *rqstp)
|
||||
struct xdr_buf *snd_buf = &rqstp->rq_snd_buf;
|
||||
int first, last, i;
|
||||
|
||||
if (rqstp->rq_release_snd_buf)
|
||||
rqstp->rq_release_snd_buf(rqstp);
|
||||
|
||||
if (snd_buf->page_len == 0) {
|
||||
rqstp->rq_enc_pages_num = 0;
|
||||
return 0;
|
||||
|
Loading…
Reference in New Issue
Block a user