]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8977868) | patch
rxrpc: Fix use-after-free in rxrpc_put_local()
authorDavid Howells <dhowells@redhat.com>
Thu, 30 Jan 2020 21:50:35 +0000 (21:50 +0000)
committerDavid Howells <dhowells@redhat.com>
Thu, 30 Jan 2020 21:50:41 +0000 (21:50 +0000)
commit959fb771bb78635ddd8eb093cc9730c3728d8e43
treeae116a5a1ab3b27ee80d49fe7fea7134ebeaff94tree | snapshot
parent8977868190e0d0b198165933bc99d92321c8d6b9commit | diff
rxrpc: Fix use-after-free in rxrpc_put_local()

Fix rxrpc_put_local() to not access local->debug_id after calling
atomic_dec_return() as, unless that returned n==0, we no longer have the
right to access the object.

Fixes: d4a264f85e39 ("rxrpc: Fix read-after-free in rxrpc_queue_local()")
Signed-off-by: David Howells <dhowells@redhat.com>
net/rxrpc/local_object.c diff | blob | history
Linux Kernel Source Tree.