Commit a84b69cb authored Jul 04, 2015 by Al Viro

9p: forgetting to cancel request on interrupted zero-copy RPC



If we'd already sent a request and decide to abort it, we *must*
issue TFLUSH properly and not just blindly reuse the tag, or
we'll get seriously screwed when response eventually arrives
and we confuse it for response to later request that had reused
the same tag.

Cc: stable@vger.kernel.org # v3.2 and later
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

parent 43c3dd08

net/9p/client.c

+2 −1

Original line number	Diff line number	Diff line
		@@ -843,6 +843,7 @@ static struct p9_req_t p9_client_zc_rpc(struct p9_client c, int8_t type,
		if (err < 0) {
		if (err == -EIO)
		c->status = Disconnected;
		if (err != -ERESTARTSYS)
		goto reterr;
		}
		if (req->status == REQ_STATUS_ERROR) {

Admin message