Florian Westphal ab82e996a1 mptcp: hold mptcp socket before calling tcp_done ...

When processing options from tcp reset path its possible that
tcp_done(ssk) drops the last reference on the mptcp socket which
results in use-after-free.

Reviewed-by: Matthieu Baerts <matthieu.baerts@tessares.net>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Mat Martineau <mathew.j.martineau@linux.intel.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

2020-12-14 17:30:06 -08:00

..

crypto_test.c

mptcp: move crypto test to KUNIT

2020-06-26 16:21:39 -07:00

crypto.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2020-08-05 20:13:21 -07:00

ctrl.c

mptcp: add a new sysctl add_addr_timeout

2020-11-04 17:45:53 -08:00

diag.c

mptcp: allow dumping subflow context to userspace

2020-03-29 22:14:48 -07:00

Kconfig

mptcp: depends on IPV6 but not as a module

2020-10-21 08:05:40 -07:00

Makefile

mptcp: enable JOIN requests even if cookies are in use

2020-07-31 16:55:32 -07:00

mib.c

mptcp: print new line in mptcp_seq_show() if mptcp isn't in use

2020-12-07 17:45:29 -08:00

mib.h

mptcp: add RM_ADDR related mibs

2020-09-24 19:58:34 -07:00

mptcp_diag.c

mptcp: avoid a few atomic ops in the rx path

2020-11-30 17:55:23 -08:00

options.c

mptcp: link MPC subflow into msk only after accept

2020-12-09 19:31:58 -08:00

pm_netlink.c

mptcp: remove address when netlink flushes addrs

2020-12-14 17:30:06 -08:00

pm.c

mptcp: link MPC subflow into msk only after accept

2020-12-09 19:31:58 -08:00

protocol.c

mptcp: be careful on subflows shutdown

2020-12-09 19:31:58 -08:00

protocol.h

mptcp: use MPTCPOPT_HMAC_LEN macro

2020-12-14 17:30:06 -08:00

subflow.c

mptcp: hold mptcp socket before calling tcp_done

2020-12-14 17:30:06 -08:00

syncookies.c

mptcp: fix syncookie build error on UP

2020-08-01 11:52:55 -07:00

token_test.c

mptcp: introduce token KUNIT self-tests

2020-06-26 16:21:39 -07:00

token.c

mptcp: token: fix unititialized variable

2020-11-03 13:08:30 -08:00