Daniel Gryniewicz has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/477485 ) Change subject: State - Allow last ref to be dropped in _state_del_locked ...................................................................... State - Allow last ref to be dropped in _state_del_locked If an entry was killed (for exmaple for being stale) then the last ref could be held by the state. This would lead to a use-after-free in _state_del_locked() when allowing the cleanup. However, we've completely unlinked and unlocked before we drop that last ref, so it's safe to do the cleanup during that unref, since it won't recurse for this state. Change-Id: I3454223536cd68e700a6b23c7476c35b3dcab804 Signed-off-by: Daniel Gryniewicz <dang(a)redhat.com&gt; --- M src/SAL/nfs4_state.c 1 file changed, 2 insertions(+), 3 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/85/477485/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/477485 To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I3454223536cd68e700a6b23c7476c35b3dcab804 Gerrit-Change-Number: 477485 Gerrit-PatchSet: 1 Gerrit-Owner: Daniel Gryniewicz <dang(a)redhat.com&gt; Gerrit-MessageType: newchange