summaryrefslogtreecommitdiffstats
path: root/net/core
diff options
context:
space:
mode:
authorKuniyuki Iwashima <kuniyu@amazon.com>2023-09-01 17:27:08 -0700
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2023-09-23 10:48:13 +0200
commit9a371bb50458f7fe3c59b0218eb528abfabd176f (patch)
treee7c30bacf9a100f9334dd7248b39ae84ede728e3 /net/core
parente93c77c400be5a024a69557d4600ce75e2abd17c (diff)
downloadlinux-stable-9a371bb50458f7fe3c59b0218eb528abfabd176f.tar.gz
linux-stable-9a371bb50458f7fe3c59b0218eb528abfabd176f.tar.bz2
linux-stable-9a371bb50458f7fe3c59b0218eb528abfabd176f.zip
af_unix: Fix data race around sk->sk_err.
[ Upstream commit b192812905e4b134f7b7994b079eb647e9d2d37e ] As with sk->sk_shutdown shown in the previous patch, sk->sk_err can be read locklessly by unix_dgram_sendmsg(). Let's use READ_ONCE() for sk_err as well. Note that the writer side is marked by commit cc04410af7de ("af_unix: annotate lockless accesses to sk->sk_err"). Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") Signed-off-by: Kuniyuki Iwashima <kuniyu@amazon.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'net/core')
-rw-r--r--net/core/sock.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/core/sock.c b/net/core/sock.c
index 9a4559b863fb..e1d0c8c715b8 100644
--- a/net/core/sock.c
+++ b/net/core/sock.c
@@ -2074,7 +2074,7 @@ static long sock_wait_for_wmem(struct sock *sk, long timeo)
break;
if (READ_ONCE(sk->sk_shutdown) & SEND_SHUTDOWN)
break;
- if (sk->sk_err)
+ if (READ_ONCE(sk->sk_err))
break;
timeo = schedule_timeout(timeo);
}