summaryrefslogtreecommitdiff
path: root/fs/ceph/osd_client.c
diff options
context:
space:
mode:
authorSage Weil <sage@newdream.net>2010-03-24 21:30:19 -0700
committerSage Weil <sage@newdream.net>2010-05-17 15:25:14 -0700
commit6f46cb29350963527b663c9eb4fe964daa9ae707 (patch)
tree6550abaa45abaff66668e2914c1219e9f4cb930f /fs/ceph/osd_client.c
parentc7708075f18086ee7d02df8b891910893e9ea372 (diff)
downloadlinux-3.10-6f46cb29350963527b663c9eb4fe964daa9ae707.tar.gz
linux-3.10-6f46cb29350963527b663c9eb4fe964daa9ae707.tar.bz2
linux-3.10-6f46cb29350963527b663c9eb4fe964daa9ae707.zip
ceph: fix theoretically possible double-put on connection
This would only trigger if we bailed out before resetting r_con_filling_msg because the server reply was corrupt (oversized). Signed-off-by: Sage Weil <sage@newdream.net>
Diffstat (limited to 'fs/ceph/osd_client.c')
-rw-r--r--fs/ceph/osd_client.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/fs/ceph/osd_client.c b/fs/ceph/osd_client.c
index 22a33f8c880..3d2bfbc232d 100644
--- a/fs/ceph/osd_client.c
+++ b/fs/ceph/osd_client.c
@@ -1386,6 +1386,7 @@ static struct ceph_msg *get_reply(struct ceph_connection *con,
req->r_reply, req->r_con_filling_msg);
ceph_con_revoke_message(req->r_con_filling_msg, req->r_reply);
ceph_con_put(req->r_con_filling_msg);
+ req->r_con_filling_msg = NULL;
}
if (front > req->r_reply->front.iov_len) {