Cong Wang 5a8e7aea95 llc: set SOCK_RCU_FREE in llc_sap_add_socket() ... WHen an llc sock is added into the sk_laddr_hash of an llc_sap, it is not marked with SOCK_RCU_FREE. This causes that the sock could be freed while it is still being read by __llc_lookup_established() with RCU read lock. sock is refcounted, but with RCU read lock, nothing prevents the readers getting a zero refcnt. Fix it by setting SOCK_RCU_FREE in llc_sap_add_socket(). Reported-by: syzbot+11e05f04c15e03be5254@syzkaller.appspotmail.com Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2018-10-15 22:01:37 -07:00
..
af_llc.c	Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL	2018-06-28 10:40:47 -07:00
Kconfig	llc: fix whitespace issues	2018-07-24 14:10:42 -07:00
llc_c_ac.c	llc: delete timers synchronously in llc_sk_free()	2018-04-22 14:55:03 -04:00
llc_c_ev.c
llc_c_st.c	llc: Make llc_conn_ev_qfyr_t function pointer arrays const	2014-12-10 15:21:24 -05:00
llc_conn.c	llc: set SOCK_RCU_FREE in llc_sap_add_socket()	2018-10-15 22:01:37 -07:00
llc_core.c	llc: use refcount_inc_not_zero() for llc_sap_find()	2018-08-07 15:54:00 -07:00
llc_if.c	llc: fix whitespace issues	2018-07-24 14:10:42 -07:00
llc_input.c	locking/atomics: COCCINELLE/treewide: Convert trivial ACCESS_ONCE() patterns to READ_ONCE()/WRITE_ONCE()	2017-10-25 11:01:08 +02:00
llc_output.c
llc_pdu.c
llc_proc.c	proc: introduce proc_create_seq{,_data}	2018-05-16 07:23:35 +02:00
llc_s_ac.c
llc_s_ev.c
llc_s_st.c	llc: Make llc_sap_action_t function pointer arrays const	2014-12-10 15:21:24 -05:00
llc_sap.c	net: llc: drop VLA in llc_sap_mcast()	2018-03-12 11:14:06 -04:00
llc_station.c
Makefile	llc: fix whitespace issues	2018-07-24 14:10:42 -07:00
sysctl_net_llc.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00