Chuck Lever
d95b814359
xprtrdma: Prevent leak of rpcrdma_rep objects ...
[ Upstream commit 07e10308ee5da8e6132e0b737ece1c99dd651fb6 ]
If a reply has been processed but the RPC is later retransmitted
anyway, the req->rl_reply field still contains the only pointer to
the old rpcrdma rep. When the next reply comes in, the reply handler
will stomp on the rl_reply field, leaking the old rep.
A trace event is added to capture such leaks.
This problem seems to be worsened by the restructuring of the RPC
Call path in v4.20. Fully addressing this issue will require at
least a re-architecture of the disconnect logic, which is not
appropriate during -rc.
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Signed-off-by: Anna Schumaker <Anna.Schumaker@Netapp.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2019-12-05 09:20:59 +01:00
6lowpan: iphc: reset mac_header after decompress to fix panic
2018-07-06 12:32:12 +02:00
9p: Transport error uninitialized
2019-10-11 18:21:12 +02:00
vlan: disable SIOCSHWTSTAMP in container
2019-05-16 19:41:30 +02:00
appletalk: enforce CAP_NET_RAW for raw sockets
2019-10-05 13:09:31 +02:00
net: use skb_queue_empty_lockless() in poll() handlers
2019-11-10 11:27:48 +01:00
ax25: enforce CAP_NET_RAW for raw sockets
2019-10-05 13:09:32 +02:00
batman-adv: Avoid free/alloc race when handling OGM buffer
2019-11-06 13:06:22 +01:00
Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS
2019-11-20 18:47:42 +01:00
bpf/test_run: support cgroup local storage
2018-08-03 00:47:32 +02:00
net: bpfilter: use get_pid_task instead of pid_task
2018-10-17 22:03:40 -07:00
bridge: ebtables: don't crash when using dnat target in output chains
2019-12-05 09:19:41 +01:00
net: use skb_queue_empty_lockless() in poll() handlers
2019-11-10 11:27:48 +01:00
can: gw: Fix error path of cgw_module_init
2019-08-29 08:28:30 +02:00
libceph: fix PG split vs OSD (re)connect race
2019-08-29 08:28:50 +02:00
net/net_namespace: Check the return value of register_pernet_subsys()
2019-12-05 09:20:51 +01:00
net: dcb: Add priority-to-DSCP map getters
2018-07-27 13:17:50 -07:00
inet: stop leaking jiffies on the wire
2019-11-10 11:27:37 +01:00
net: use skb_queue_empty_lockless() in poll() handlers
2019-11-10 11:27:48 +01:00
net: remove blank lines at end of file
2018-07-24 14:10:43 -07:00
net: dsa: fix switch tree list
2019-11-10 11:27:53 +01:00
net: Convert GRO SKB handling to list_head.
2018-06-26 11:33:04 +09:00
net/hsr: fix possible crash in add_timer()
2019-03-19 13:12:38 +01:00
ieee802154: enforce CAP_NET_RAW for raw sockets
2019-10-05 13:09:32 +02:00
net: sched: ife: check on metadata length
2018-04-22 21:12:00 -04:00
net: bpfilter: fix iptables failure if bpfilter_umh is disabled
2019-12-01 09:17:18 +01:00
ipv6: Fix handling of LLA with VRF and sockets bound to VRF
2019-12-01 09:17:34 +01:00
Revert "net: simplify sock_poll_wait"
2018-11-04 14:50:51 +01:00
kcm: switch order of device registration to fix a crash
2019-04-17 08:38:40 +02:00
af_key: fix leaks in key_pol_get_resp and dump_sp.
2019-07-26 09:14:01 +02:00
compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
2019-08-09 17:52:34 +02:00
lapb: fixed leak of control-blocks.
2019-06-22 08:15:13 +02:00
llc: avoid blocking in llc_sap_close()
2019-11-20 18:46:35 +01:00
mac80211: fix station inactive_time shortly after boot
2019-12-05 09:19:46 +01:00
net: mac802154: tx: expand tailroom if necessary
2018-08-06 11:21:37 +02:00
mpls: Return error for RTA_GATEWAY attribute
2019-03-10 07:17:19 +01:00
net/ncsi: Fixup .dumpit message flags and ID check in Netlink handler
2018-08-22 21:39:08 -07:00
netfilter: nf_tables: fix a missing check of nla_put_failure
2019-12-05 09:20:59 +01:00
netlabel: fix out-of-bounds memory accesses
2019-03-10 07:17:18 +01:00
genetlink: Fix a memory leak on error path
2019-04-03 06:26:15 +02:00
netrom: hold sock when setting skb->destructor
2019-07-28 08:29:27 +02:00
nfc: netlink: fix double device reference drop
2019-11-12 19:20:30 +01:00
nsh: set mac len based on inner packet
2018-07-12 16:55:29 -07:00
openvswitch: fix linking without CONFIG_NF_CONNTRACK_LABELS
2019-12-01 09:17:16 +01:00
net/packet: fix race in tpacket_snd()
2019-08-25 10:48:04 +02:00
net: use skb_queue_empty_lockless() in poll() handlers
2019-11-10 11:27:48 +01:00
net: sched: act_sample: fix psample group handling on overwrite
2019-09-10 10:33:38 +01:00
net: qrtr: Stop rx_worker before freeing node
2019-10-05 13:09:27 +02:00
net/rds: Fix error handling in rds_ib_add_one()
2019-10-07 18:57:24 +02:00
Here are quite a large number of fixes, notably:
2018-09-03 22:12:02 -07:00
net/rose: fix unbound loop in rose_loopback_timer()
2019-05-02 09:59:00 +02:00
rxrpc: Fix trace-after-put looking at the put peer record
2019-11-06 13:06:24 +01:00
net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key
2019-12-01 09:16:06 +01:00
sctp: use sk_wmem_queued to check for writable space
2019-12-01 09:16:39 +01:00
net/smc: make sure EPOLLOUT is raised
2019-09-06 10:22:06 +02:00
net: strparser: partially revert "strparser: Call skb_unclone conditionally"
2019-05-16 19:41:27 +02:00
xprtrdma: Prevent leak of rpcrdma_rep objects
2019-12-05 09:20:59 +01:00
tipc: fix a missing check of genlmsg_put
2019-12-05 09:20:55 +01:00
net: tls, fix sk_write_space NULL write when tx disabled
2019-09-06 10:22:04 +02:00
net: fix warning in af_unix
2019-12-01 09:16:33 +01:00
VSOCK: bind to random port for VMADDR_PORT_ANY
2019-12-05 09:20:19 +01:00
wimax: remove blank lines at EOF
2018-07-24 14:10:42 -07:00
cfg80211: call disconnect_wk when AP stops
2019-12-01 09:17:34 +01:00
net/x25: fix a race in x25_bind()
2019-03-19 13:12:40 +01:00
xsk: proper AF_XDP socket teardown ordering
2019-11-24 08:20:32 +01:00
xfrm: use correct size to initialise sp->ovec
2019-11-24 08:20:31 +01:00
sock: Make sock->sk_stamp thread-safe
2019-01-09 17:38:33 +01:00
net: remove blank lines at end of file
2018-07-24 14:10:43 -07:00
bpfilter: check compiler capability in Kconfig
2018-06-28 13:36:39 +09:00
net: socket: set sock->sk to NULL after calling proto_ops::release()
2019-03-10 07:17:18 +01:00
d95b814359