Eric Dumazet fbb1fb4ad4 net: defer call to cgroup_sk_alloc()
sk_clone_lock() might run while TCP/DCCP listener already vanished.

In order to prevent use after free, it is better to defer cgroup_sk_alloc()
to the point we know both parent and child exist, and from process context.

Fixes: e994b2f0fb92 ("tcp: do not lock listener to process SYN packets")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Johannes Weiner <hannes@cmpxchg.org>
Cc: Tejun Heo <tj@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2017-10-09 20:55:01 -07:00
..
2017-08-09 22:43:50 -07:00
2017-10-09 20:55:01 -07:00
2017-10-09 20:55:01 -07:00
2017-10-01 22:35:07 -07:00
2017-08-29 15:16:52 -07:00
2017-08-03 09:13:51 -07:00
2017-08-29 15:16:52 -07:00
2017-08-16 11:27:52 -07:00