]> git.baikalelectronics.ru Git - kernel.git/commit
NFC: Close a race condition in llcp_sock_getname()
authorCong Wang <xiyou.wangcong@gmail.com>
Fri, 29 Jan 2016 19:37:40 +0000 (11:37 -0800)
committerSamuel Ortiz <sameo@linux.intel.com>
Thu, 25 Feb 2016 07:41:01 +0000 (08:41 +0100)
commit5c6d399fd54468b401958744f1371d0d54071c17
tree6173ee32c1628a3973ec9305611895434ad121e7
parent21205dcdfd22781ecf5227d177dc1528af1af16b
NFC: Close a race condition in llcp_sock_getname()

llcp_sock_getname() checks llcp_sock->dev to make sure
llcp_sock is already connected or bound, however, we could
be in the middle of llcp_sock_bind() where llcp_sock->dev
is bound and llcp_sock->service_name_len is set,
but llcp_sock->service_name is not, in this case we would
lead to copy some bytes from a NULL pointer.

Just lock the sock since this is not a hot path anyway.

Reported-by: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
net/nfc/llcp_sock.c