diff options
| author | Eric Dumazet <edumazet@google.com> | 2017-08-15 02:44:43 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2017-08-15 07:31:27 +0200 |
| commit | d624d276d1ddacbcb12ad96832ce0c7b82cd25db (patch) | |
| tree | b78aa1f2060bf2aa70b13af5d58a7bca994af306 /include | |
| parent | dccp: purge write queue in dccp_destroy_sock() (diff) | |
| download | linux-d624d276d1ddacbcb12ad96832ce0c7b82cd25db.tar.xz linux-d624d276d1ddacbcb12ad96832ce0c7b82cd25db.zip | |
tcp: fix possible deadlock in TCP stack vs BPF filter
Filtering the ACK packet was not put at the right place.
At this place, we already allocated a child and put it
into accept queue.
We absolutely need to call tcp_child_process() to release
its spinlock, or we will deadlock at accept() or close() time.
Found by syzkaller team (Thanks a lot !)
Fixes: 8fac365f63c8 ("tcp: Add a tcp_filter hook before handle ack packet")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Cc: Chenbo Feng <fengc@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions