[LU-7942] Null pointer may be dereferenced in function replay_request_or_update()

• Type: Bug
• Resolution: Unresolved
• Priority: Minor
• Affects Version/s: Lustre 2.9.0
• Labels: kw
• Severity: 3
• Assignee: WC Triage
• Reporter: Dmitry Eremin (Inactive)

Description

2362					dtrq = distribute_txn_get_next_req(tdtd);
2363					lu_context_enter(&thread->t_env->le_ctx);
2364					rc = tdtd->tdtd_replay_handler(env, tdtd, dtrq);
2365					lu_context_exit(&thread->t_env->le_ctx);
2366					extend_recovery_timer(obd, obd_timeout, true);
2367		 
2368					if (rc == 0 && dtrq->dtrq_xid != 0) {...}

TRACEBACK

• An event which alters the program's state, leading to the defect
  ldlm_lib.c:2362: 'dtrq' is assigned the return value from function 'distribute_txn_get_next_req'.
  • An event which alters the program's state, leading to the defect
    update_recovery.c:567: 'dtrq' has been assigned a NULL value.
  • A condition which occurs, leading to the defect
    update_recovery.c:570: !list_empty( &tdtd->tdtd_replay_list) is false
  • An event which alters the program's state, leading to the defect
    update_recovery.c:577: 'dtrq' is returned by 'distribute_txn_get_next_req'.
  • A condition which occurs, leading to the defect
    ldlm_lib.c:2368: rc==0 is true
  • An event which alters the program's state, leading to the defect
    ldlm_lib.c:2368: 'dtrq' is explicitly dereferenced.