Cong Wang 222e05e0a2 llc: use refcount_inc_not_zero() for llc_sap_find() ...

[ Upstream commit 0dcb82254d65f72333aa50ad626d1e9665ad093b ]

llc_sap_put() decreases the refcnt before deleting sap
from the global list. Therefore, there is a chance
llc_sap_find() could find a sap with zero refcnt
in this global list.

Close this race condition by checking if refcnt is zero
or not in llc_sap_find(), if it is zero then it is being
removed so we can just treat it as gone.

Reported-by: <syzbot+278893f3f7803871f7ce@syzkaller.appspotmail.com>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-08-22 07:46:08 +02:00

..

af_llc.c

llc: better deal with too small mtu

2018-05-19 10:20:23 +02:00

Kconfig

…

llc_c_ac.c

llc: properly handle dev_queue_xmit() return value

2018-05-30 07:52:20 +02:00

llc_c_ev.c

…

llc_c_st.c

llc: Make llc_conn_ev_qfyr_t function pointer arrays const

2014-12-10 15:21:24 -05:00

llc_conn.c

llc: properly handle dev_queue_xmit() return value

2018-05-30 07:52:20 +02:00

llc_core.c

llc: use refcount_inc_not_zero() for llc_sap_find()

2018-08-22 07:46:08 +02:00

llc_if.c

net: llc: include linux/errno.h instead of asm/errno.h

2014-10-24 15:51:42 -04:00

llc_input.c

llc: Fix races between llc2 handler use and (un)registration

2012-08-14 16:52:02 -07:00

llc_output.c

llc: remove noisy WARN from llc_mac_hdr_init

2014-01-28 18:01:32 -08:00

llc_pdu.c

…

llc_proc.c

sock: tigthen lockdep checks for sock_owned_by_user

2016-04-13 22:37:20 -04:00

llc_s_ac.c

…

llc_s_ev.c

…

llc_s_st.c

llc: Make llc_sap_action_t function pointer arrays const

2014-12-10 15:21:24 -05:00

llc_sap.c

net: convert sock.sk_refcnt from atomic_t to refcount_t

2017-07-01 07:39:08 -07:00

llc_station.c

llc2: Collapse remainder of state machine into simple if-else if-statement

2012-09-17 13:04:19 -04:00

Makefile

…

sysctl_net_llc.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00