[LU-7274] gss_do_ctx_fini_rpc() passes an already freed request to ptlrpc_req_finished()

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.8.0
• Labels: easy gssapi ptlrpc
• Severity: 3
• Assignee: WC Triage
• Reporter: John Hammond

Description

        req = ptlrpc_request_alloc(imp, &RQF_SEC_CTX);
        if (req == NULL) {
                CWARN("ctx %p(%u): fail to prepare rpc, destroy locally\n",
                      ctx, ctx->cc_vcred.vc_uid);
                GOTO(out, rc = -ENOMEM);
        }

        rc = ptlrpc_request_bufs_pack(req, LUSTRE_OBD_VERSION, SEC_CTX_FINI,
                                      NULL, ctx);
	if (rc) {
                ptlrpc_request_free(req);
                GOTO(out_ref, rc);
        }

        ...

out_ref:
        ptlrpc_req_finished(req);
out:
        RETURN(rc);
}