net, sunrpc: convert gss_cl_ctx.count from atomic_t to refcount_t
refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Signed-off-by: Elena Reshetova <elena.reshetova@intel.com> Signed-off-by: Hans Liljestrand <ishkamiel@gmail.com> Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: David Windsor <dwindsor@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:

committed by
David S. Miller

parent
156be7edc8
commit
0fa104726b
@@ -13,6 +13,7 @@
|
||||
#define _LINUX_SUNRPC_AUTH_GSS_H
|
||||
|
||||
#ifdef __KERNEL__
|
||||
#include <linux/refcount.h>
|
||||
#include <linux/sunrpc/auth.h>
|
||||
#include <linux/sunrpc/svc.h>
|
||||
#include <linux/sunrpc/gss_api.h>
|
||||
@@ -65,7 +66,7 @@ struct rpc_gss_init_res {
|
||||
* the wire when communicating with a server. */
|
||||
|
||||
struct gss_cl_ctx {
|
||||
atomic_t count;
|
||||
refcount_t count;
|
||||
enum rpc_gss_proc gc_proc;
|
||||
u32 gc_seq;
|
||||
spinlock_t gc_seq_lock;
|
||||
|
Reference in New Issue
Block a user