Eric Dumazet 3006bc3889 bonding: fix a race in IGMP handling ...

RCU conversion in IGMP code done in net-next-2.6 raised a race in
__bond_resend_igmp_join_requests().

It iterates in_dev->mc_list without appropriate protection (RTNL, or
read_lock on in_dev->mc_list_lock).

Another cpu might delete an entry while we use it and trigger a fault.

Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2010-11-18 09:30:42 -08:00

..

bond_3ad.c

bonding: cleanup: remove braces from single block statements

2010-10-21 03:09:49 -07:00

bond_3ad.h

Remove duplicate slow protocol define in bond_3ad.h

2009-05-09 13:15:49 -07:00

bond_alb.c

bonding: correctly process non-linear skbs

2010-09-14 14:25:32 -07:00

bond_alb.h

Convert bonding timers to workqueues

2007-10-23 20:32:00 -04:00

bond_ipv6.c

bonding: fix bond_inet6addr_event()

2010-07-19 09:34:31 -07:00

bond_main.c

bonding: fix a race in IGMP handling

2010-11-18 09:30:42 -08:00

bond_sysfs.c

bonding: Fix deadlock in bonding driver resulting from internal locking when using netpoll

2010-10-18 08:32:07 -07:00

bonding.h

bonding: make release_and_destroy static

2010-10-21 03:09:46 -07:00

Makefile

bonding: send IPv6 neighbor advertisement on failover

2008-11-06 00:49:37 -05:00