mirror of
https://github.com/torvalds/linux.git
synced 2024-11-23 20:51:44 +00:00
7df9c24625
Dmitry has reported that a BUG_ON() condition in unix_notinflight() may be triggered by a simple code that forwards unix socket in an SCM_RIGHTS message. That is caused by incorrect unix socket GC implementation in unix_gc(). The GC first collects list of candidates, then (a) decrements their "children's" inflight counter, (b) checks which inflight counters are now 0, and then (c) increments all inflight counters back. (a) and (c) are done by calling scan_children() with inc_inflight or dec_inflight as the second argument. Commit |
||
---|---|---|
.. | ||
af_unix.c | ||
diag.c | ||
garbage.c | ||
Kconfig | ||
Makefile | ||
sysctl_net_unix.c |