diff options
| author | Namjae Jeon <linkinjeon@kernel.org> | 2022-07-25 13:36:52 +0900 |
|---|---|---|
| committer | Steve French <stfrench@microsoft.com> | 2022-07-31 23:14:32 -0500 |
| commit | af7c39d971e43cd0af488729bca362427ad99488 (patch) | |
| tree | 3c174aa7d504f663a6741a5dffee77666f86df65 /fs/ksmbd/smb_common.h | |
| parent | a14c573870a664386adc10526a6c2648ea56dae1 (diff) | |
| download | linux-stable-af7c39d971e43cd0af488729bca362427ad99488.tar.gz linux-stable-af7c39d971e43cd0af488729bca362427ad99488.tar.bz2 linux-stable-af7c39d971e43cd0af488729bca362427ad99488.zip | |
ksmbd: fix racy issue while destroying session on multichannel
After multi-channel connection with windows, Several channels of
session are connected. Among them, if there is a problem in one channel,
Windows connects again after disconnecting the channel. In this process,
the session is released and a kernel oop can occurs while processing
requests to other channels. When the channel is disconnected, if other
channels still exist in the session after deleting the channel from
the channel list in the session, the session should not be released.
Finally, the session will be released after all channels are disconnected.
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Reviewed-by: Hyunchul Lee <hyc.lee@gmail.com>
Signed-off-by: Steve French <stfrench@microsoft.com>
Diffstat (limited to 'fs/ksmbd/smb_common.h')
| -rw-r--r-- | fs/ksmbd/smb_common.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/ksmbd/smb_common.h b/fs/ksmbd/smb_common.h index e1369b4345a9..318c16fa81da 100644 --- a/fs/ksmbd/smb_common.h +++ b/fs/ksmbd/smb_common.h @@ -421,7 +421,7 @@ struct smb_version_ops { int (*check_sign_req)(struct ksmbd_work *work); void (*set_sign_rsp)(struct ksmbd_work *work); int (*generate_signingkey)(struct ksmbd_session *sess, struct ksmbd_conn *conn); - int (*generate_encryptionkey)(struct ksmbd_session *sess); + int (*generate_encryptionkey)(struct ksmbd_conn *conn, struct ksmbd_session *sess); bool (*is_transform_hdr)(void *buf); int (*decrypt_req)(struct ksmbd_work *work); int (*encrypt_resp)(struct ksmbd_work *work); |