[LU-15634] Use after free in ptlrpc

• Type: Bug
• Resolution: Fixed
• Priority: Critical
• Fix Version/s: Lustre 2.15.0
• Affects Version/s: Lustre 2.14.0, Lustre 2.15.0
• Severity: 3
• Assignee: Shaun Tancheff
• Reporter: Shaun Tancheff

Description

ptlrpc: Use after free of 'conn' in rhashtable retry

Use after free of 'conn' in the uncommon case of
rhashtable_lookup_get_insert_fast failing with -EBUSY or -ENOMEM

Move OBD_FREE_PTR(conn) below the retry and set conn2 to NULL
on error, propagating to conn and returning to the caller.

Fixes: 37b29a8f70 ("LU-8130 ptlrpc: convert conn_hash to rhashtable");

Comments

[Peter Jones]

Landed for 2.15

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/46763/
Subject: LU-15634 ptlrpc: Use after free of 'conn' in rhashtable retry
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 9dcbf8b3d44f9bb2b1d9c3ac6036345bad827797

[Gerrit Updater]

"Shaun Tancheff <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/46763
Subject: LU-15634 ptlrpc: Use after free of 'conn' in rhashtable retry
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: ba185ad950b678dfbada531e6425fbbdaa1e18e3