diff options
| author | Cong Wang <amwang@redhat.com> | 2013-04-02 21:52:40 +0000 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2013-04-07 17:04:17 -0400 |
| commit | cfbe800b8b771afc7d5aa113e19f85ec933b7618 (patch) | |
| tree | 153b62e924d6a9982788f294590d0e78d7e53d08 /net/mac802154/tx.c | |
| parent | 23a9544206dd91dfe048fcf67abec3f3104c42b9 (diff) | |
| download | linux-cfbe800b8b771afc7d5aa113e19f85ec933b7618.tar.gz linux-cfbe800b8b771afc7d5aa113e19f85ec933b7618.tar.bz2 linux-cfbe800b8b771afc7d5aa113e19f85ec933b7618.zip | |
802: fix a possible race condition
(Resend with a better changelog)
garp_pdu_queue() should ways be called with this spin lock.
garp_uninit_applicant() only holds rtnl lock which is not
enough here. A possible race can happen as garp_pdu_rcv()
is called in BH context:
garp_pdu_rcv()
|->garp_pdu_parse_msg()
|->garp_pdu_parse_attr()
|-> garp_gid_event()
Found by code inspection.
Cc: Eric Dumazet <eric.dumazet@gmail.com>
Cc: "David S. Miller" <davem@davemloft.net>
Cc: David Ward <david.ward@ll.mit.edu>
Cc: "Jorge Boncompte [DTI2]" <jorge@dti2.net>
Signed-off-by: Cong Wang <amwang@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/mac802154/tx.c')
0 files changed, 0 insertions, 0 deletions