From 2d252266c26c366a56beeea04203d79827dd594e Mon Sep 17 00:00:00 2001
From: Olga Kornievskaia <aglo@citi.umich.edu>
Date: Wed, 8 Jun 2011 12:54:31 -0400
Subject: [PATCH] [driver] fixing dereference of upcall entry after free if we
 fail to get security context

---
 sys/nfs41_driver.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sys/nfs41_driver.c b/sys/nfs41_driver.c
index a8fc138..77bf814 100644
--- a/sys/nfs41_driver.c
+++ b/sys/nfs41_driver.c
@@ -1237,8 +1237,8 @@ NTSTATUS nfs41_UpcallCreate(
             print_error("SeCreateClientSecurityFromSubjectContext "
                 "failed with %x\n", status);
             RxFreePool(entry);
-        }
-        entry->psec_ctx = &entry->sec_ctx;
+        } else
+            entry->psec_ctx = &entry->sec_ctx;
         SeReleaseSubjectContext(&sec_ctx);
     } else
         entry->psec_ctx = clnt_sec_ctx;