--- net/sunrpc/rpc_pipe.c

+++ net/sunrpc/rpc_pipe.c

@@ -47,7 +47,7 @@ static void rpc_purge_list(struct rpc_in

return;

do {

msg = list_entry(head->next, struct rpc_pipe_msg, list);

- list_del(&msg->list);

+ list_del_init(&msg->list);

msg->errno = err;

destroy_msg(msg);

} while (!list_empty(head));

@@ -207,7 +207,7 @@ rpc_pipe_release(struct inode *inode, st

if (msg != NULL) {

spin_lock(&inode->i_lock);

msg->errno = -EAGAIN;

- list_del(&msg->list);

+ list_del_init(&msg->list);

spin_unlock(&inode->i_lock);

rpci->ops->destroy_msg(msg);

}

@@ -267,7 +267,7 @@ rpc_pipe_read(struct file *filp, char __

if (res < 0 || msg->len == msg->copied) {

filp->private_data = NULL;

spin_lock(&inode->i_lock);

- list_del(&msg->list);

+ list_del_init(&msg->list);

spin_unlock(&inode->i_lock);

rpci->ops->destroy_msg(msg);

}

@@ -587,6 +587,8 @@ static struct dentry *__rpc_lookup_creat

struct dentry *dentry;

dentry = __rpc_lookup_create(parent, name);

+ if (IS_ERR(dentry))

+ return dentry;

if (dentry->d_inode == NULL)

return dentry;

dput(dentry);