Cong Wang 2ff9f0820d llc: use refcount_inc_not_zero() for llc_sap_find()
[ Upstream commit 0dcb82254d65f72333aa50ad626d1e9665ad093b ]

llc_sap_put() decreases the refcnt before deleting sap
from the global list. Therefore, there is a chance
llc_sap_find() could find a sap with zero refcnt
in this global list.

Close this race condition by checking if refcnt is zero
or not in llc_sap_find(), if it is zero then it is being
removed so we can just treat it as gone.

Reported-by: <syzbot+278893f3f7803871f7ce@syzkaller.appspotmail.com>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-08-22 07:47:13 +02:00
..
2018-05-16 10:08:44 +02:00
2016-12-03 23:54:25 -05:00
2018-04-13 19:48:29 +02:00
2016-05-29 22:33:25 -07:00
2016-10-20 11:23:08 -04:00
2018-07-22 14:27:38 +02:00
2018-05-30 07:50:32 +02:00
2016-08-17 19:36:23 -04:00
2016-08-17 19:36:23 -04:00