diff options
| author | David Howells <dhowells@redhat.com> | 2017-03-04 01:01:41 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2017-03-07 22:59:06 +0100 |
| commit | 146d8fef9da1ba854de7fa28b9cb9eb147535f88 (patch) | |
| tree | 76b9bea4ac0c4bcd1a2c50418a304007b54ad6bd /net/rxrpc/recvmsg.c | |
| parent | tcp: fix various issues for sockets morphing to listen state (diff) | |
| download | linux-146d8fef9da1ba854de7fa28b9cb9eb147535f88.tar.xz linux-146d8fef9da1ba854de7fa28b9cb9eb147535f88.zip | |
rxrpc: Call state should be read with READ_ONCE() under some circumstances
The call state may be changed at any time by the data-ready routine in
response to received packets, so if the call state is to be read and acted
upon several times in a function, READ_ONCE() must be used unless the call
state lock is held.
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/rxrpc/recvmsg.c')
| -rw-r--r-- | net/rxrpc/recvmsg.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/net/rxrpc/recvmsg.c b/net/rxrpc/recvmsg.c index 6491ca46a03f..3e2f1a8e9c5b 100644 --- a/net/rxrpc/recvmsg.c +++ b/net/rxrpc/recvmsg.c @@ -527,7 +527,7 @@ try_again: msg->msg_namelen = len; } - switch (call->state) { + switch (READ_ONCE(call->state)) { case RXRPC_CALL_SERVER_ACCEPTING: ret = rxrpc_recvmsg_new_call(rx, call, msg, flags); break; @@ -640,7 +640,7 @@ int rxrpc_kernel_recv_data(struct socket *sock, struct rxrpc_call *call, mutex_lock(&call->user_mutex); - switch (call->state) { + switch (READ_ONCE(call->state)) { case RXRPC_CALL_CLIENT_RECV_REPLY: case RXRPC_CALL_SERVER_RECV_REQUEST: case RXRPC_CALL_SERVER_ACK_REQUEST: |