SUNRPC: Ensure that gss_auth isn't freed before its upcall messages

Fix a race in which the RPC client is shutting down while the
gss daemon is processing a downcall. If the RPC client manages to
shut down before the gss daemon is done, then the struct gss_auth
used in gss_release_msg() may have already been freed.

Link: http://lkml.kernel.org/r/[email protected]
Reported-by: John <[email protected]>
Reported-by: Borislav Petkov <[email protected]>
Cc: [email protected] # 3.12+
Signed-off-by: Trond Myklebust <[email protected]>
1 file changed