[LU-16617] A null-pointer dereference in osc_request.c:3358:function osc_iocontro

• Type: Bug
• Resolution: Duplicate
• Priority: Critical

Environment

Three server nodes and one client. Kernel version: Ubuntu-5.4.0-90.101

# MGS
mkfs.lustre --fsname=lustre --mgs /dev/vda
mount -t lustre /dev/vda /root/lustre-server

# MDS
mkfs.lustre --fsname=lustre --index=0 --mgsnode=$start_ip@tcp0 --mdt /dev/vda
mount -t lustre /dev/vda /root/lustre-server

# OSS
mkfs.lustre --ost --fsname=lustre --index=1 --reformat --mgsnode=$start_ip@tcp0 /dev/vda
mount -t lustre /dev/vda /root/lustre-server

# Client
mount -t lustre $start_ip@tcp0:/lustre /root/lustre-client

• Severity: 3
• Assignee: WC Triage
• Reporter: Tao Lyu

Description

A null-pointer dereference is detected in osc_request.c:3358 (function osc_iocontrol) and then crashes the kernel.

1. Strace
   open(".", O_RDONLY) = 3
   ioctl(3, _IOC(_IOC_WRITE, 0x66, 0x85, 0x8), 0) = ?
   +++ killed by SIGSEGV +++
   Segmentation fault

Issue Links

• is related to: LU-16616 crash in osc_brw_prep_request() ASSERTION( page_count == 1 || (ergo(i == 0, poff + pg->count == PAGE_SIZE) ...
• is related to: LU-16634 Null pointer dereference in lustre_set_wire_obdo