inneek@gmail.com has uploaded this change for review.

View Change

Fix TOCTOU races in NFSv4 OPEN, OPEN_DOWNGRADE and CLOSE operations.

This change addresses potential Time-of-Check-Time-of-Use (TOCTOU) vulnerabilities in the NFSv4 OPEN, OPEN_DOWNGRADE and CLOSE handlers.

Change-Id: Ifcb1060a63440b09caf624fe04121fe85ca5dbe6
Signed-off-by: Inna Batenkov <batenkovinna@google.com>
Signed-off-by: Inna Batenkov <inneek@gmail.com>
---
M src/Protocols/NFS/nfs4_op_close.c
M src/Protocols/NFS/nfs4_op_open.c
M src/Protocols/NFS/nfs4_op_open_downgrade.c
M src/SAL/nfs4_state.c
M src/SAL/nfs4_state_id.c
M src/SAL/nlm_state.c
M src/include/sal_data.h
M src/include/sal_functions.h
8 files changed, 429 insertions(+), 181 deletions(-)

git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/03/1237403/1

To view, visit change 1237403. To unsubscribe, or for help writing mail filters, visit settings.

Gerrit-MessageType: newchange
Gerrit-Project: ffilz/nfs-ganesha
Gerrit-Branch: next
Gerrit-Change-Id: Ifcb1060a63440b09caf624fe04121fe85ca5dbe6
Gerrit-Change-Number: 1237403
Gerrit-PatchSet: 1
Gerrit-Owner: inneek@gmail.com