diff options
| author | Wen Gu <guwen@linux.alibaba.com> | 2022-04-22 10:56:19 +0300 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2022-04-25 21:03:48 +0300 |
| commit | 0558226cebee256aa3f8ec0cc5a800a10bf120a6 (patch) | |
| tree | e30751d6e6b40913f4033d436e606fb2888a2bbe /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | 97b9af7a70936e331170c79040cc9bf20071b566 (diff) | |
| download | linux-0558226cebee256aa3f8ec0cc5a800a10bf120a6.tar.xz | |
net/smc: Fix slab-out-of-bounds issue in fallback
syzbot reported a slab-out-of-bounds/use-after-free issue,
which was caused by accessing an already freed smc sock in
fallback-specific callback functions of clcsock.
This patch fixes the issue by restoring fallback-specific
callback functions to original ones and resetting clcsock
sk_user_data to NULL before freeing smc sock.
Meanwhile, this patch introduces sk_callback_lock to make
the access and assignment to sk_user_data mutually exclusive.
Reported-by: syzbot+b425899ed22c6943e00b@syzkaller.appspotmail.com
Fixes: 341adeec9ada ("net/smc: Forward wakeup to smc socket waitqueue after fallback")
Link: https://lore.kernel.org/r/00000000000013ca8105d7ae3ada@google.com/
Signed-off-by: Wen Gu <guwen@linux.alibaba.com>
Acked-by: Karsten Graul <kgraul@linux.ibm.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions