Cong Wang 0dcb82254d llc: use refcount_inc_not_zero() for llc_sap_find() ...

llc_sap_put() decreases the refcnt before deleting sap
from the global list. Therefore, there is a chance
llc_sap_find() could find a sap with zero refcnt
in this global list.

Close this race condition by checking if refcnt is zero
or not in llc_sap_find(), if it is zero then it is being
removed so we can just treat it as gone.

Reported-by: <syzbot+278893f3f7803871f7ce@syzkaller.appspotmail.com>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2018-08-07 15:54:00 -07:00

..

af_llc.c

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

Kconfig

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

llc_c_ac.c

llc: delete timers synchronously in llc_sk_free()

2018-04-22 14:55:03 -04:00

llc_c_ev.c

net: replace remaining __FUNCTION__ occurrences

2008-03-05 20:47:47 -08:00

llc_c_st.c

llc: Make llc_conn_ev_qfyr_t function pointer arrays const

2014-12-10 15:21:24 -05:00

llc_conn.c

llc: delete timers synchronously in llc_sk_free()

2018-04-22 14:55:03 -04:00

llc_core.c

llc: use refcount_inc_not_zero() for llc_sap_find()

2018-08-07 15:54:00 -07:00

llc_if.c

net: llc: include linux/errno.h instead of asm/errno.h

2014-10-24 15:51:42 -04:00

llc_input.c

locking/atomics: COCCINELLE/treewide: Convert trivial ACCESS_ONCE() patterns to READ_ONCE()/WRITE_ONCE()

2017-10-25 11:01:08 +02:00

llc_output.c

llc: remove noisy WARN from llc_mac_hdr_init

2014-01-28 18:01:32 -08:00

llc_pdu.c

[LLC]: skb allocation size for responses

2008-03-31 21:02:47 -07:00

llc_proc.c

proc: introduce proc_create_seq{,_data}

2018-05-16 07:23:35 +02:00

llc_s_ac.c

[LLC]: skb allocation size for responses

2008-03-31 21:02:47 -07:00

llc_s_ev.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

llc_s_st.c

llc: Make llc_sap_action_t function pointer arrays const

2014-12-10 15:21:24 -05:00

llc_sap.c

net: llc: drop VLA in llc_sap_mcast()

2018-03-12 11:14:06 -04:00

llc_station.c

llc2: Collapse remainder of state machine into simple if-else if-statement

2012-09-17 13:04:19 -04:00

Makefile

[LLC]: Add sysctl support for the LLC timeouts

2005-09-22 04:30:44 -03:00

sysctl_net_llc.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00