Eric Dumazet c2f34a65a6 tcp/dccp: fix potential NULL deref in __inet_inherit_port()
As we no longer hold listener lock in fast path, it is possible that a
child is created right after listener freed its bound port, if a close()
is done while incoming packets are processed.

__inet_inherit_port() must detect this and return an error,
so that caller can free the child earlier.

Fixes: e994b2f0fb92 ("tcp: do not lock listener to process SYN packets")
Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash table")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-10-14 19:06:31 -07:00
..
2015-08-30 18:12:36 -04:00
2015-10-13 04:57:58 -07:00
2015-10-13 17:42:34 +02:00
2015-10-08 04:27:03 -07:00
2015-08-24 14:48:10 -07:00
2015-10-07 04:27:43 -07:00
2015-10-08 04:27:03 -07:00
2015-10-01 16:38:52 -04:00
2015-10-08 04:27:03 -07:00