[RHEL 5.4] nfsd dereferences uninitialized list head on error exit in nfsd4_list_rec_dir()
Issue
- In nfsd4_list_rec_dir(), if the dentry_open() returns an error, 'goto out' statement skips 'INIT_LIST_HEAD(dentries)'.
- That results in panic or hang in the while statement at 'out:' label, because nfsd dereference uninitialized list pointers.
Environment
- Red Hat Enterprise Linux 5 Update 4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
