Blame SOURCES/0006-CLIENT-MC-pointer-to-the-context-mutex-shouldn-t-be-.patch

59171a
From d386e94ef49d95d7305a3e6578e41a2cf61dfc5c Mon Sep 17 00:00:00 2001
59171a
From: Alexey Tikhonov <atikhono@redhat.com>
59171a
Date: Tue, 16 Aug 2022 21:51:03 +0200
59171a
Subject: [PATCH 6/6] CLIENT:MC: pointer to the context mutex shouldn't be
59171a
 touched
59171a
MIME-Version: 1.0
59171a
Content-Type: text/plain; charset=UTF-8
59171a
Content-Transfer-Encoding: 8bit
59171a
59171a
Even brief window inside `sss_nss_mc_destroy_ctx()` when `mutex == NULL`
59171a
was creating a possibility for a race.
59171a
59171a
Reviewed-by: Sumit Bose <sbose@redhat.com>
59171a
Reviewed-by: Tomáš Halman <thalman@redhat.com>
59171a
(cherry picked from commit 4ac93d9c5df59cdb7f397b4467f1c1c4822ff757)
59171a
---
59171a
 src/sss_client/nss_mc.h        |  4 +++-
59171a
 src/sss_client/nss_mc_common.c | 20 ++++++++++----------
59171a
 2 files changed, 13 insertions(+), 11 deletions(-)
59171a
59171a
diff --git a/src/sss_client/nss_mc.h b/src/sss_client/nss_mc.h
59171a
index 0f88521e9..9ab2736fa 100644
59171a
--- a/src/sss_client/nss_mc.h
59171a
+++ b/src/sss_client/nss_mc.h
59171a
@@ -44,7 +44,9 @@ enum sss_mc_state {
59171a
     RECYCLED,
59171a
 };
59171a
 
59171a
-/* common stuff */
59171a
+/* In the case this structure is extended, don't forget to update
59171a
+ * `SSS_CLI_MC_CTX_INITIALIZER` and `sss_nss_mc_destroy_ctx()`.
59171a
+ */
59171a
 struct sss_cli_mc_ctx {
59171a
     enum sss_mc_state initialized;
59171a
 #if HAVE_PTHREAD
59171a
diff --git a/src/sss_client/nss_mc_common.c b/src/sss_client/nss_mc_common.c
59171a
index f38a4a85a..3128861bf 100644
59171a
--- a/src/sss_client/nss_mc_common.c
59171a
+++ b/src/sss_client/nss_mc_common.c
59171a
@@ -130,25 +130,25 @@ errno_t sss_nss_check_header(struct sss_cli_mc_ctx *ctx)
59171a
 
59171a
 static void sss_nss_mc_destroy_ctx(struct sss_cli_mc_ctx *ctx)
59171a
 {
59171a
-    uint32_t active_threads = ctx->active_threads;
59171a
-#if HAVE_PTHREAD
59171a
-    pthread_mutex_t *mutex = ctx->mutex;
59171a
-#endif
59171a
 
59171a
     if ((ctx->mmap_base != NULL) && (ctx->mmap_size != 0)) {
59171a
         munmap(ctx->mmap_base, ctx->mmap_size);
59171a
     }
59171a
+    ctx->mmap_base = NULL;
59171a
+    ctx->mmap_size = 0;
59171a
+
59171a
     if (ctx->fd != -1) {
59171a
         close(ctx->fd);
59171a
     }
59171a
-    memset(ctx, 0, sizeof(struct sss_cli_mc_ctx));
59171a
     ctx->fd = -1;
59171a
 
59171a
-    /* restore count of active threads */
59171a
-    ctx->active_threads = active_threads;
59171a
-#if HAVE_PTHREAD
59171a
-    ctx->mutex = mutex;
59171a
-#endif
59171a
+    ctx->seed = 0;
59171a
+    ctx->data_table = NULL;
59171a
+    ctx->dt_size = 0;
59171a
+    ctx->hash_table = NULL;
59171a
+    ctx->ht_size = 0;
59171a
+    ctx->initialized = UNINITIALIZED;
59171a
+    /* `mutex` and `active_threads` should be left intact */
59171a
 }
59171a
 
59171a
 static errno_t sss_nss_mc_init_ctx(const char *name,
59171a
-- 
59171a
2.37.1
59171a