[LU-2394] Possible NULL pointer dereference in cat_cancel_cb

• Type: Bug
• Resolution: Fixed
• Priority: Critical
• Fix Version/s: Lustre 2.4.0
• Affects Version/s: Lustre 2.4.0
• Labels: topsequoia
• Severity: 3
• Assignee: Alex Zhuravlev
• Reporter: Prakash Surya (Inactive)

Description

If llog_cat_id2handle fails and returns a positive value, it may free
its 'res' parameter and set it to NULL. Thus, a caller must be cautious
not to cause a NULL pointer dereference on error.

Specifically, the cat_cancel_cb function does not take this precaution, which can manifest itself in a NULL pointer dereference.

See here for the patch to fix cat_cancel_cb: 4676