Cong Wang 0a3b8b2b21 tipc: orphan sock in tipc_release()
Before we unlock the sock in tipc_release(), we have to
detach sk->sk_socket from sk, otherwise a parallel
tipc_sk_fill_sock_diag() could stil read it after we
free this socket.

Fixes: c30b70deb5f4 ("tipc: implement socket diagnostics for AF_TIPC")
Reported-and-tested-by: syzbot+48804b87c16588ad491d@syzkaller.appspotmail.com
Cc: Jon Maloy <jon.maloy@ericsson.com>
Cc: Ying Xue <ying.xue@windriver.com>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Acked-by: Ying Xue <ying.xue@windriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2018-09-05 22:14:00 -07:00
..
2018-03-23 13:12:18 -04:00
2018-03-27 13:18:09 -04:00
2018-08-29 18:04:54 -07:00
2018-07-21 16:23:22 -07:00
2018-07-21 16:23:22 -07:00
2018-07-21 16:23:22 -07:00
2016-07-26 14:26:42 -07:00
2018-08-29 18:04:54 -07:00
2018-09-05 22:14:00 -07:00
2018-08-29 18:04:54 -07:00