diff options
| author | Trond Myklebust <trond.myklebust@hammerspace.com> | 2018-11-13 16:37:54 -0500 |
|---|---|---|
| committer | Trond Myklebust <trond.myklebust@hammerspace.com> | 2018-11-13 17:15:17 -0500 |
| commit | e39d8a186ed002854196668cb7562ffdfbc6d379 (patch) | |
| tree | d184e95ec9eff9dc0f77b20d6c59aae9520570ea /fs/nfs/delegation.c | |
| parent | e3d5e573a54dabdc0f9f3cb039d799323372b251 (diff) | |
| download | linux-stable-e39d8a186ed002854196668cb7562ffdfbc6d379.tar.gz linux-stable-e39d8a186ed002854196668cb7562ffdfbc6d379.tar.bz2 linux-stable-e39d8a186ed002854196668cb7562ffdfbc6d379.zip | |
NFSv4: Fix an Oops during delegation callbacks
If the server sends a CB_GETATTR or a CB_RECALL while the filesystem is
being unmounted, then we can Oops when releasing the inode in
nfs4_callback_getattr() and nfs4_callback_recall().
Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>
Diffstat (limited to 'fs/nfs/delegation.c')
| -rw-r--r-- | fs/nfs/delegation.c | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/fs/nfs/delegation.c b/fs/nfs/delegation.c index 07b839560576..6ec2f78c1e19 100644 --- a/fs/nfs/delegation.c +++ b/fs/nfs/delegation.c @@ -850,16 +850,23 @@ nfs_delegation_find_inode_server(struct nfs_server *server, const struct nfs_fh *fhandle) { struct nfs_delegation *delegation; - struct inode *res = NULL; + struct inode *freeme, *res = NULL; list_for_each_entry_rcu(delegation, &server->delegations, super_list) { spin_lock(&delegation->lock); if (delegation->inode != NULL && nfs_compare_fh(fhandle, &NFS_I(delegation->inode)->fh) == 0) { - res = igrab(delegation->inode); + freeme = igrab(delegation->inode); + if (freeme && nfs_sb_active(freeme->i_sb)) + res = freeme; spin_unlock(&delegation->lock); if (res != NULL) return res; + if (freeme) { + rcu_read_unlock(); + iput(freeme); + rcu_read_lock(); + } return ERR_PTR(-EAGAIN); } spin_unlock(&delegation->lock); |