diff options
| author | Vijay Bellur <vbellur@redhat.com> | 2013-03-02 23:39:40 +0530 | 
|---|---|---|
| committer | Vijay Bellur <vbellur@redhat.com> | 2013-03-03 06:19:39 -0800 | 
| commit | eb3b05581e2533f89df04ea75f5c4247045f07dc (patch) | |
| tree | a89d730f93107cf71a410b01387cd73572031d94 | |
| parent | e776deed24645cc52b0fab46d566c91b4163adc1 (diff) | |
nfs/server: Fix multiple crashes in acl handler.
Change-Id: I67c224c74c02f7058bcf546713501dd7ab810826
BUG: 915280
Signed-off-by: Vijay Bellur <vbellur@redhat.com>
Reviewed-on: http://review.gluster.org/4606
Reviewed-by: Jeff Darcy <jdarcy@redhat.com>
Tested-by: Gluster Build System <jenkins@build.gluster.com>
| -rw-r--r-- | xlators/nfs/server/src/acl3.c | 26 | 
1 files changed, 16 insertions, 10 deletions
diff --git a/xlators/nfs/server/src/acl3.c b/xlators/nfs/server/src/acl3.c index 46431a47526..ed60775ab32 100644 --- a/xlators/nfs/server/src/acl3.c +++ b/xlators/nfs/server/src/acl3.c @@ -126,9 +126,9 @@ nfs3_fh_to_xlator (struct nfs3_state *nfs3, struct nfs3_fh *fh);          do {                                                            \                  calls = nfs3_call_state_init ((nfs3state), (rq), v); \                  if (!calls) {                                           \ -                        gf_log (GF_NLM, GF_LOG_ERROR, "Failed to "      \ +                        gf_log (GF_ACL, GF_LOG_ERROR, "Failed to "      \                                  "init call state");                     \ -                        opstat = nlm4_failed;                           \ +                        opstat = NFS3ERR_SERVERFAULT;                   \                          rpcsvc_request_seterr (req, SYSTEM_ERR);        \                          goto errlabel;                                  \                  }                                                       \ @@ -229,12 +229,14 @@ acl3_getacl_cbk (call_frame_t *frame, void *cookie, xlator_t *this,          getaclreply                     *getaclreply = NULL;          cs = frame->local; +        if (cs) +                getaclreply = &cs->args.getaclreply; +          if (op_ret == -1) {                  stat = nfs3_errno_to_nfsstat3 (op_errno);                  goto err;          } -        getaclreply = &cs->args.getaclreply;          getaclreply->aclentry.aclentry_val = cs->aclentry;          getaclreply->daclentry.daclentry_val = cs->daclentry; @@ -271,7 +273,8 @@ acl3_getacl_cbk (call_frame_t *frame, void *cookie, xlator_t *this,          return 0;  err: -        getaclreply->status = stat; +        if (getaclreply) +                getaclreply->status = stat;          acl3_getacl_reply (cs, getaclreply);          nfs3_call_state_wipe (cs);          return 0; @@ -289,13 +292,14 @@ acl3_stat_cbk (call_frame_t *frame, void *cookie, xlator_t *this,          nfs_user_t                      nfu = {0, };          cs = frame->local; +        if (cs) +                getaclreply = &cs->args.getaclreply; +          if (op_ret == -1) {                  stat = nfs3_errno_to_nfsstat3 (op_errno);                  goto err;          } -        getaclreply = &cs->args.getaclreply; -          getaclreply->attr_follows = 1;          getaclreply->attr = nfs3_stat_to_fattr3 (buf);          getaclreply->mask = 0xf; @@ -377,7 +381,7 @@ acl3svc_getacl (rpcsvc_request_t *req)                                       vol, stat, rpcerr);          cs->vol = vol; -        acl3_volume_started_check (nfs3, vol, ret, rpcerr); +        acl3_volume_started_check (nfs3, vol, ret, acl3err);          ret = nfs3_fh_resolve_and_resume (cs, fhp,                                            NULL, acl3_getacl_resume); @@ -385,9 +389,11 @@ acl3svc_getacl (rpcsvc_request_t *req)  acl3err:          if (ret < 0) {                  gf_log (GF_ACL, GF_LOG_ERROR, "unable to resolve and resume"); -                cs->args.getaclreply.status = stat; -                acl3_getacl_reply (cs, &cs->args.getaclreply); -                nfs3_call_state_wipe (cs); +                if (cs) { +                        cs->args.getaclreply.status = stat; +                        acl3_getacl_reply (cs, &cs->args.getaclreply); +                        nfs3_call_state_wipe (cs); +                }                  return 0;          }  | 
