diff options
| author | David Howells <dhowells@redhat.com> | 2017-11-02 16:06:55 +0100 |
|---|---|---|
| committer | David Howells <dhowells@redhat.com> | 2017-11-02 16:20:43 +0100 |
| commit | 1457cc4cfb93511de347d1d0a1c9da3e826b66fe (patch) | |
| tree | b038ecca9f4b4cb63ab5c94fa0bc951ac843a638 /net/rxrpc/call_event.c | |
| parent | rxrpc: Lock around calling a kernel service Rx notification (diff) | |
| download | linux-1457cc4cfb93511de347d1d0a1c9da3e826b66fe.tar.xz linux-1457cc4cfb93511de347d1d0a1c9da3e826b66fe.zip | |
rxrpc: Fix a null ptr deref in rxrpc_fill_out_ack()
rxrpc_fill_out_ack() needs to be passed the connection pointer from its
caller rather than using call->conn as the call may be disconnected in
parallel with it, clearing call->conn, leading to:
BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
IP: rxrpc_send_ack_packet+0x231/0x6a4
Signed-off-by: David Howells <dhowells@redhat.com>
Diffstat (limited to 'net/rxrpc/call_event.c')
0 files changed, 0 insertions, 0 deletions