diff options
| author |   Paolo Abeni <pabeni@redhat.com> | 2018-11-15 02:34:50 +0100 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2018-11-16 23:01:56 -0800 |
| commit | 9c48060141bd937497774546e4bb89b8992be383 (patch) | |
| tree | b62996434ab3d9776fe3b5197c38ca6939452434 /init | |
| parent | etf: Drop all expired packets (diff) | |
| download | linux-dev-9c48060141bd937497774546e4bb89b8992be383.tar.xz linux-dev-9c48060141bd937497774546e4bb89b8992be383.zip | |
udp: fix jump label misuse
The commit 60fb9567bf30 ("udp: implement complete book-keeping for
encap_needed") introduced a severe misuse of jump label APIs, which
syzbot, as reported by Eric, was able to exploit.
When multiple sockets/process can concurrently request (and than
disable) the udp encap, we need to track the activation counter with
*_inc()/*_dec() jump label variants, or we can experience bad things
at disable time.
Fixes: 60fb9567bf30 ("udp: implement complete book-keeping for encap_needed")
Reported-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'init')
0 files changed, 0 insertions, 0 deletions