Jon Maloy 60c2530696 tipc: fix race between poll() and setsockopt() ... Letting tipc_poll() dereference a socket's pointer to struct tipc_group entails a race risk, as the group item may be deleted in a concurrent tipc_sk_join() or tipc_sk_leave() thread. We now move the 'open' flag in struct tipc_group to struct tipc_sock, and let the former retain only a pointer to the moved field. This will eliminate the race risk. Reported-by: syzbot+799dafde0286795858ac@syzkaller.appspotmail.com Signed-off-by: Jon Maloy <jon.maloy@ericsson.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2018-01-19 15:12:21 -05:00
..
addr.c
addr.h
bcast.c
bcast.h
bearer.c
bearer.h
core.c
core.h	net: tipc: remove unused hardirq.h	2018-01-08 20:59:25 -05:00
discover.c
discover.h
eth_media.c
group.c	tipc: fix race between poll() and setsockopt()	2018-01-19 15:12:21 -05:00
group.h	tipc: fix race between poll() and setsockopt()	2018-01-19 15:12:21 -05:00
ib_media.c
Kconfig
link.c
link.h
Makefile
monitor.c	tipc: fix tipc_mon_delete() oops in tipc_enable_bearer() error path	2017-12-27 10:55:00 -05:00
monitor.h
msg.c
msg.h
name_distr.c
name_distr.h
name_table.c	tipc: fix bug during lookup of multicast destination nodes	2018-01-15 14:27:13 -05:00
name_table.h	tipc: fix bug during lookup of multicast destination nodes	2018-01-15 14:27:13 -05:00
net.c
net.h
netlink_compat.c
netlink.c
netlink.h
node.c	tipc: fix a memory leak in tipc_nl_node_get_link()	2018-01-15 13:45:50 -05:00
node.h
server.c	tipc: fix race condition at topology server receive	2018-01-16 14:42:41 -05:00
server.h	tipc: fix race condition at topology server receive	2018-01-16 14:42:41 -05:00
socket.c	tipc: fix race between poll() and setsockopt()	2018-01-19 15:12:21 -05:00
socket.h
subscr.c	tipc: fix race condition at topology server receive	2018-01-16 14:42:41 -05:00
subscr.h	tipc: improve groupcast scope handling	2018-01-09 12:35:58 -05:00
sysctl.c
udp_media.c
udp_media.h