projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6d0d779) | patch
net/tls: swap sk_write_space on close
authorJakub Kicinski <jakub.kicinski@netronome.com>
Sat, 10 Aug 2019 01:36:23 +0000 (18:36 -0700)
committerDavid S. Miller <davem@davemloft.net>
Sat, 10 Aug 2019 02:55:22 +0000 (19:55 -0700)
commit57c722e932cfb82e9820bbaae1b1f7222ea97b52
tree293fcf87b9004d4fc8b4af374cebbe46c65f5bfdtree | snapshot
parent6d0d779dca73cd5acb649c54f81401f93098b298commit | diff
net/tls: swap sk_write_space on close

Now that we swap the original proto and clear the ULP pointer
on close we have to make sure no callback will try to access
the freed state. sk_write_space is not part of sk_prot, remember
to swap it.

Reported-by: syzbot+dcdc9deefaec44785f32@syzkaller.appspotmail.com
Fixes: 95fa145479fb ("bpf: sockmap/tls, close can race with map free")
Signed-off-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/tls/tls_main.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git