diff options
| author | Sridhar Samudrala <sri@us.ibm.com> | 2006-01-17 22:51:28 +0300 |
|---|---|---|
| committer | Sridhar Samudrala <sri@us.ibm.com> | 2006-01-17 22:51:28 +0300 |
| commit | 7a48f923b8b27bfaa5f7b2a449a6fe268724ddd5 (patch) | |
| tree | 005774759b9f0bba685adc9d9bccbe208a787c2f /net/sctp/inqueue.c | |
| parent | 2664b25051f7ab96b22b199aa2f5ef6a949a4296 (diff) | |
| download | linux-7a48f923b8b27bfaa5f7b2a449a6fe268724ddd5.tar.xz | |
[SCTP]: Fix potential race condition between sctp_close() and sctp_rcv().
Do not release the reference to association/endpoint if an incoming skb is
added to backlog. Instead release it after the chunk is processed in
sctp_backlog_rcv().
Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>
Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Diffstat (limited to 'net/sctp/inqueue.c')
| -rw-r--r-- | net/sctp/inqueue.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/net/sctp/inqueue.c b/net/sctp/inqueue.c index 2d33922c044b..297b8951463e 100644 --- a/net/sctp/inqueue.c +++ b/net/sctp/inqueue.c @@ -73,8 +73,10 @@ void sctp_inq_free(struct sctp_inq *queue) /* If there is a packet which is currently being worked on, * free it as well. */ - if (queue->in_progress) + if (queue->in_progress) { sctp_chunk_free(queue->in_progress); + queue->in_progress = NULL; + } if (queue->malloced) { /* Dump the master memory segment. */ |