Rémi Denis-Courmont 0a9f558c72 phonet/pep: fix racy skb_queue_empty() use ...

[ Upstream commit 7d2a894d7f487dcb894df023e9d3014cf5b93fe5 ]

The receive queues are protected by their respective spin-lock, not
the socket lock. This could lead to skb_peek() unexpectedly
returning NULL or a pointer to an already dequeued socket buffer.

Fixes: 9641458d3ec4 ("Phonet: Pipe End Point for Phonet Pipes protocol")
Signed-off-by: Rémi Denis-Courmont <courmisch@gmail.com>
Link: https://lore.kernel.org/r/20240218081214.4806-2-remi@remlab.net
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-03-01 13:35:10 +01:00

..

af_phonet.c

phonet: Use netif_rx().

2022-03-07 11:40:41 +00:00

datagram.c

phonet: take correct lock to peek at the RX queue

2024-03-01 13:35:10 +01:00

Kconfig

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

pep-gprs.c

net/sock: Introduce trace_sk_data_ready()

2023-01-23 11:26:50 +00:00

pep.c

phonet/pep: fix racy skb_queue_empty() use

2024-03-01 13:35:10 +01:00

pn_dev.c

net: Remove redundant if statements

2021-08-05 13:27:50 +01:00

pn_netlink.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 336

2019-06-05 17:37:07 +02:00

socket.c

sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)

2023-06-24 15:50:13 -07:00

sysctl.c

sysctl: pass kernel pointers to ->proc_handler

2020-04-27 02:07:40 -04:00