Commit 6f46cb29 authored by Sage Weil's avatar Sage Weil

ceph: fix theoretically possible double-put on connection

This would only trigger if we bailed out before resetting r_con_filling_msg
because the server reply was corrupt (oversized).
Signed-off-by: default avatarSage Weil <sage@newdream.net>
parent c7708075
...@@ -1386,6 +1386,7 @@ static struct ceph_msg *get_reply(struct ceph_connection *con, ...@@ -1386,6 +1386,7 @@ static struct ceph_msg *get_reply(struct ceph_connection *con,
req->r_reply, req->r_con_filling_msg); req->r_reply, req->r_con_filling_msg);
ceph_con_revoke_message(req->r_con_filling_msg, req->r_reply); ceph_con_revoke_message(req->r_con_filling_msg, req->r_reply);
ceph_con_put(req->r_con_filling_msg); ceph_con_put(req->r_con_filling_msg);
req->r_con_filling_msg = NULL;
} }
if (front > req->r_reply->front.iov_len) { if (front > req->r_reply->front.iov_len) {
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment