summaryrefslogtreecommitdiffstats
path: root/net/key
diff options
context:
space:
mode:
authorsjur.brandeland@stericsson.com <sjur.brandeland@stericsson.com>2012-02-02 02:21:02 +0100
committerDavid S. Miller <davem@davemloft.net>2012-02-02 20:35:12 +0100
commitb01377a4200d0dfc7b04a8daabb4739727353703 (patch)
tree2c1eef3ae76495872c2b55459c318e9a905c479f /net/key
parentnet/hyperv: Fix the page buffer when an RNDIS message goes beyond page boundary (diff)
downloadlinux-b01377a4200d0dfc7b04a8daabb4739727353703.tar.xz
linux-b01377a4200d0dfc7b04a8daabb4739727353703.zip
caif: Bugfix list_del_rcu race in cfmuxl_ctrlcmd.
Always use cfmuxl_remove_uplayer when removing a up-layer. cfmuxl_ctrlcmd() can be called independently and in parallel with cfmuxl_remove_uplayer(). The race between them could cause list_del_rcu to be called on a node which has been already taken out from the list. That lead to a (rare) crash on accessing poisoned node->prev inside list_del_rcu. This fix ensures that deletion are done holding the same lock. Reported-by: Dmitry Tarnyagin <dmitry.tarnyagin@stericsson.com> Signed-off-by: Sjur Brændeland <sjur.brandeland@stericsson.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions