Cong Wang 5a8e7aea95 llc: set SOCK_RCU_FREE in llc_sap_add_socket() ...

WHen an llc sock is added into the sk_laddr_hash of an llc_sap,
it is not marked with SOCK_RCU_FREE.

This causes that the sock could be freed while it is still being
read by __llc_lookup_established() with RCU read lock. sock is
refcounted, but with RCU read lock, nothing prevents the readers
getting a zero refcnt.

Fix it by setting SOCK_RCU_FREE in llc_sap_add_socket().

Reported-by: syzbot+11e05f04c15e03be5254@syzkaller.appspotmail.com
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2018-10-15 22:01:37 -07:00

..

af_llc.c

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

Kconfig

llc: fix whitespace issues

2018-07-24 14:10:42 -07:00

llc_c_ac.c

llc: delete timers synchronously in llc_sk_free()

2018-04-22 14:55:03 -04:00

llc_c_ev.c

…

llc_c_st.c

llc: Make llc_conn_ev_qfyr_t function pointer arrays const

2014-12-10 15:21:24 -05:00

llc_conn.c

llc: set SOCK_RCU_FREE in llc_sap_add_socket()

2018-10-15 22:01:37 -07:00

llc_core.c

llc: use refcount_inc_not_zero() for llc_sap_find()

2018-08-07 15:54:00 -07:00

llc_if.c

llc: fix whitespace issues

2018-07-24 14:10:42 -07:00

llc_input.c

locking/atomics: COCCINELLE/treewide: Convert trivial ACCESS_ONCE() patterns to READ_ONCE()/WRITE_ONCE()

2017-10-25 11:01:08 +02:00

llc_output.c

llc: remove noisy WARN from llc_mac_hdr_init

2014-01-28 18:01:32 -08:00

llc_pdu.c

…

llc_proc.c

proc: introduce proc_create_seq{,_data}

2018-05-16 07:23:35 +02:00

llc_s_ac.c

…

llc_s_ev.c

…

llc_s_st.c

llc: Make llc_sap_action_t function pointer arrays const

2014-12-10 15:21:24 -05:00

llc_sap.c

net: llc: drop VLA in llc_sap_mcast()

2018-03-12 11:14:06 -04:00

llc_station.c

llc2: Collapse remainder of state machine into simple if-else if-statement

2012-09-17 13:04:19 -04:00

Makefile

llc: fix whitespace issues

2018-07-24 14:10:42 -07:00

sysctl_net_llc.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00