]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0210eee) | patch
l2tp: protect tunnel->del_work by ref_count
authorAlexander Couzens <lynxis@fe80.eu>
Mon, 28 Sep 2015 09:32:42 +0000 (11:32 +0200)
committerDavid S. Miller <davem@davemloft.net>
Tue, 29 Sep 2015 05:39:10 +0000 (22:39 -0700)
commit0b84b2177bcc599307b31ac46358d58db840dae9
tree5d7f25db11b5b985c7366d8bf954aeca976f2b2btree | snapshot
parent0210eeeabba2a766d9df4ab1382161f93b9a30fecommit | diff
l2tp: protect tunnel->del_work by ref_count

There is a small chance that tunnel_free() is called before tunnel->del_work scheduled
resulting in a zero pointer dereference.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Acked-by: James Chapman <jchapman@katalix.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/l2tp/l2tp_core.c diff | blob | history
Linux Kernel Source Tree.