Files
linux/include/net
Wei Wang c5cff8561d ipv6: add rcu grace period before freeing fib6_node
We currently keep rt->rt6i_node pointing to the fib6_node for the route.
And some functions make use of this pointer to dereference the fib6_node
from rt structure, e.g. rt6_check(). However, as there is neither
refcount nor rcu taken when dereferencing rt->rt6i_node, it could
potentially cause crashes as rt->rt6i_node could be set to NULL by other
CPUs when doing a route deletion.
This patch introduces an rcu grace period before freeing fib6_node and
makes sure the functions that dereference it takes rcu_read_lock().

Note: there is no "Fixes" tag because this bug was there in a very
early stage.

Signed-off-by: Wei Wang <weiwan@google.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Acked-by: Martin KaFai Lau <kafai@fb.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2017-08-22 11:03:19 -07:00
..
2017-07-11 06:08:58 -04:00
2017-04-05 10:15:20 +02:00
2017-04-24 12:35:56 -04:00
2016-07-08 12:20:57 +02:00
2016-04-25 16:44:27 -04:00
2016-04-25 16:44:27 -04:00
2016-06-09 23:41:03 -07:00
2016-02-16 20:21:48 -05:00
2017-04-14 10:06:42 +02:00
2017-04-03 19:04:48 -07:00
2016-05-20 18:03:16 -04:00
2016-04-27 22:48:25 -04:00
2017-02-03 15:16:45 -05:00
2017-06-15 12:12:40 -04:00
2017-08-16 16:28:47 -07:00
2016-08-17 19:36:23 -04:00
2016-10-03 02:00:22 -04:00
2016-10-04 02:11:51 -04:00
2016-07-08 12:20:57 +02:00
2016-03-23 22:09:58 -04:00
2016-12-25 17:21:22 +01:00
2017-06-17 22:54:00 -04:00
2017-01-09 16:07:41 -05:00
2017-06-15 12:12:40 -04:00
2016-05-03 16:08:14 -04:00