Skip to content
Snippets Groups Projects
Commit 7617a826 authored by Jakub Kicinski's avatar Jakub Kicinski Committed by 谢秀奇
Browse files

net/tls: swap sk_write_space on close


[ Upstream commit 57c722e9 ]

Now that we swap the original proto and clear the ULP pointer
on close we have to make sure no callback will try to access
the freed state. sk_write_space is not part of sk_prot, remember
to swap it.

Reported-by: default avatar <syzbot+dcdc9deefaec44785f32@syzkaller.appspotmail.com>
Fixes: 95fa1454 ("bpf: sockmap/tls, close can race with map free")
Signed-off-by: default avatarJakub Kicinski <jakub.kicinski@netronome.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
parent 5c70a792
No related branches found
No related tags found
No related merge requests found
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment