linux

iv/linux

History

Kuniyuki Iwashima 83690b82d2 af_unix: Use skb_queue_empty_lockless() in unix_release_sock().

If the socket type is SOCK_STREAM or SOCK_SEQPACKET, unix_release_sock()
checks the length of the peer socket's recvq under unix_state_lock().

However, unix_stream_read_generic() calls skb_unlink() after releasing
the lock.  Also, for SOCK_SEQPACKET, __skb_try_recv_datagram() unlinks
skb without unix_state_lock().

Thues, unix_state_lock() does not protect qlen.

Let's use skb_queue_empty_lockless() in unix_release_sock().

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>

2024-06-06 12:57:15 +02:00

af_unix.c

af_unix: Use skb_queue_empty_lockless() in unix_release_sock().

2024-06-06 12:57:15 +02:00

diag.c

af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG.

2024-06-06 12:57:15 +02:00

garbage.c

af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS

2024-05-21 13:42:02 +02:00

Kconfig

af_unix: Remove CONFIG_UNIX_SCM.