Files
kernel_arpi/include/net
Wei Wang 9df16efadd ipv4: call dst_hold_safe() properly
This patch checks all the calls to
dst_hold()/skb_dst_force()/dst_clone()/dst_use() to see if
dst_hold_safe() is needed to avoid double free issue if dst
gc is removed and dst_release() directly destroys dst when
dst->__refcnt drops to 0.

In tx path, TCP hold sk->sk_rx_dst ref count and also hold sock_lock().
UDP and other similar protocols always hold refcount for
skb->_skb_refdst. So both paths seem to be safe.

In rx path, as it is lockless and skb_dst_set_noref() is likely to be
used, dst_hold_safe() should always be used when trying to hold dst.

In the routing code, if dst is held during an rcu protected session, it
is necessary to call dst_hold_safe() as the current dst might be in its
rcu grace period.

Signed-off-by: Wei Wang <weiwan@google.com>
Acked-by: Martin KaFai Lau <kafai@fb.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2017-06-17 22:54:00 -04:00
..
2017-01-12 04:01:17 -05:00
2017-04-05 10:15:20 +02:00
2017-04-24 12:35:56 -04:00
2017-02-07 13:07:46 -05:00
2016-06-27 15:06:17 -04:00
2016-07-08 12:20:57 +02:00
2016-04-25 16:44:27 -04:00
2016-04-25 16:44:27 -04:00
2016-06-09 23:41:03 -07:00
2016-02-16 20:21:48 -05:00
2017-04-14 10:06:42 +02:00
2017-04-03 19:04:48 -07:00
2016-05-20 18:03:16 -04:00
2016-04-27 22:48:25 -04:00
2017-02-03 15:16:45 -05:00
2017-06-15 12:12:40 -04:00
2017-04-13 13:19:48 -04:00
2017-06-04 22:56:55 -04:00
2016-08-17 19:36:23 -04:00
2016-10-03 02:00:22 -04:00
2016-10-04 02:11:51 -04:00
2016-07-08 12:20:57 +02:00
2016-03-23 22:09:58 -04:00
2016-12-25 17:21:22 +01:00
2017-06-17 22:54:00 -04:00
2017-01-09 16:07:41 -05:00
2017-06-15 12:12:40 -04:00
2016-05-03 16:08:14 -04:00
2015-10-26 22:24:22 -07:00