apply fixes for OpenAFS Security Advisory 2007-003

diff --git a/src/viced/afsfileprocs.c b/src/viced/afsfileprocs.c
index 3972d9df084eab4356db2506194e59f706a3d452..0b2e6c15ff0dd26d4496c575309bc78c94ac6b87 100644 (file)
--- a/src/viced/afsfileprocs.c
+++ b/src/viced/afsfileprocs.c
@@ -6082,7 +6082,9 @@ common_GiveUpCallBacks(struct rx_call *acall, struct AFSCBFids *FidArray,
                 (tcon->peer ? tcon->peer->host : 0)));
        errorCode = GetClient(tcon, &client);
        if (!errorCode) {
+           H_LOCK;
            DeleteAllCallBacks_r(client->host, 1);
+           H_UNLOCK;
            PutClient(&client);
        }
     } else {

diff --git a/src/viced/host.c b/src/viced/host.c
index 99d10431cd84ab1a0628e009d92c900d932efbad..1cf2823012f296039de4557c240083d6c3258574 100644 (file)
--- a/src/viced/host.c
+++ b/src/viced/host.c
@@ -1431,6 +1431,7 @@ h_GetHost_r(struct rx_connection *tcon)
                     host->interface ? uuid2 : ""));
 
            /* The host in the cache is not the host for this connection */
+           h_Lock_r(host);
            host->hostFlags |= HOSTDELETED;
            h_Unlock_r(host);
            if (!held)