diff options
| author |   Ursula Braun <ubraun@linux.ibm.com> | 2019-11-12 16:03:41 +0100 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2019-11-12 12:15:29 -0800 |
| commit | 6d6dd528d5af05dc2d0c773951ed68d630a0c3f1 (patch) | |
| tree | 033e0605bed205b839924f045c4a7c552fc08733 /drivers/net/ethernet | |
| parent | mdio_bus: Fix PTR_ERR applied after initialization to constant (diff) | |
| download | linux-dev-6d6dd528d5af05dc2d0c773951ed68d630a0c3f1.tar.xz linux-dev-6d6dd528d5af05dc2d0c773951ed68d630a0c3f1.zip | |
net/smc: fix refcount non-blocking connect() -part 2
If an SMC socket is immediately terminated after a non-blocking connect()
has been called, a memory leak is possible.
Due to the sock_hold move in
commit 301428ea3708 ("net/smc: fix refcounting for non-blocking connect()")
an extra sock_put() is needed in smc_connect_work(), if the internal
TCP socket is aborted and cancels the sk_stream_wait_connect() of the
connect worker.
Reported-by: syzbot+4b73ad6fc767e576e275@syzkaller.appspotmail.com
Fixes: 301428ea3708 ("net/smc: fix refcounting for non-blocking connect()")
Signed-off-by: Ursula Braun <ubraun@linux.ibm.com>
Signed-off-by: Karsten Graul <kgraul@linux.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net/ethernet')
0 files changed, 0 insertions, 0 deletions