lk/linux-kernel-test
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

netpoll: fix use after free

Browse Source 
After a bonding master reclaims the netpoll info struct, slaves could
still hold a pointer to the reclaimed data. This patch fixes it: as
soon as netpoll_async_cleanup is called for a slave (eg. when
un-enslaved), we make sure that this slave doesn't point to the data.

Signed-off-by: David Decotigny <decot@googlers.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
david decotigny
2014-07-08 15:14:41 -07:00
committed by David S. Miller
parent f51de24356
commit efa95b01da
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
net/core/netpoll.c
View File

@@ -822,7 +822,8 @@ void __netpoll_cleanup(struct netpoll *np)
RCU_INIT_POINTER(np->dev->npinfo, NULL); RCU_INIT_POINTER(np->dev->npinfo, NULL);
call_rcu_bh(&npinfo->rcu, rcu_cleanup_netpoll_info); call_rcu_bh(&npinfo->rcu, rcu_cleanup_netpoll_info);
} } else
RCU_INIT_POINTER(np->dev->npinfo, NULL);
} }
EXPORT_SYMBOL_GPL(__netpoll_cleanup); EXPORT_SYMBOL_GPL(__netpoll_cleanup);