]> git.baikalelectronics.ru Git - kernel.git/commit
mptcp: don't return sockets in foreign netns
authorFlorian Westphal <fw@strlen.de>
Fri, 24 Sep 2021 00:04:11 +0000 (17:04 -0700)
committerDavid S. Miller <davem@davemloft.net>
Fri, 24 Sep 2021 09:51:36 +0000 (10:51 +0100)
commita577ed15e630a87d92fb6f62c92a63f0e494a031
treef43dbc42ad77111069190f44356c68ca7260f4ff
parent74a469f2b089cc08bc1a3514a51ba26b9b5f03f1
mptcp: don't return sockets in foreign netns

mptcp_token_get_sock() may return a mptcp socket that is in
a different net namespace than the socket that received the token value.

The mptcp syncookie code path had an explicit check for this,
this moves the test into mptcp_token_get_sock() function.

Eventually token.c should be converted to pernet storage, but
such change is not suitable for net tree.

Fixes: f90a842e074b8 ("mptcp: refactor token container")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Mat Martineau <mathew.j.martineau@linux.intel.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/mptcp/mptcp_diag.c
net/mptcp/protocol.h
net/mptcp/subflow.c
net/mptcp/syncookies.c
net/mptcp/token.c
net/mptcp/token_test.c