Re: [patch] nfs client oops when receive a 'read reply Malformed Packet'

On Wed, 2012-06-20 at 12:05 +0800, fanchaoting wrote:
> nfs client oops when receive a "read reply Malformed Packet".
> I find that the xdr->iov may be NULL when client receive a 
> Malformed Packet(only have 'Status' and 'file_attributes').
> 
> rpcauth_unwrap_req_decode
>     nfs3_xdr_dec_read3res
>          decode_read3resok  
>              ......
>              hdrlen = (u8 *)xdr->p - (u8 *)xdr->iov->iov_base;    (oops  xdr->iov is NULL)
>              ......
> 
> rpcauth_unwrap_req_decode
>     nfs3_xdr_dec_readlink3res
>          decode_nfspath3
>              .....
>              hdrlen = (u8 *)xdr->p - (u8 *)xdr->iov->iov_base;    (oops  xdr->iov is NULL)
>              .....
>        
> Jun 18 00:54:42 RHEL5GA kernel: [ 1339.874745] BUG: unable to handle kernel NULL pointer dereference at   (null)
> Jun 18 00:54:42 RHEL5GA kernel: [ 1339.874823] IP: [<f963d31a>] nfs3_xdr_dec_read3res+0x6a/0x120 [nfs]
> Jun 18 00:54:42 RHEL5GA kernel: [ 1339.874905] *pdpt = 00000000368c6001 *pde = 0000000000000000
> Jun 18 00:54:42 RHEL5GA kernel: [ 1339.874961] Oops: 0000 [#1] SMP
> Jun 18 00:54:42 RHEL5GA kernel: [ 1339.874998] Modules linked in: nfs nfs_acl auth_rpcgss fscache lockd
sunrpc ppdev snd_hda_codec_realtek parport_pc snd_hda_intel snd_hda_codec snd_hwdep snd_pcm
snd_page_alloc snd_timer iTCO_wdt iTCO_vendor_support microcode parport snd i2c_i801 serio_raw
r8169 soundcore 8139too 8139cp mii usb_storage i915 video i2c_algo_bit drm_kms_helper drm i2c_core
[last unloaded: scsi_wait_scan]
> Jun 18 00:54:42 RHEL5GA kernel: [ 1339.875393]
> Jun 18 00:54:42 RHEL5GA kernel: [ 1339.875411] Pid: 4, comm: kworker/0:0 Not tainted