![]() nr_find_socket(), nr_find_peer() and nr_find_listener() lock the sock after finding it in the global list. However, the call path requires BH disabled for the sock lock consistently. Actually the locking is unnecessary at this point, we can just hold the sock refcnt to make sure it is not gone after we unlock the global list, and lock it later only when needed. Reported-and-tested-by: syzbot+f621cda8b7e598908efa@syzkaller.appspotmail.com Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> |
||
---|---|---|
.. | ||
af_netrom.c | ||
Makefile | ||
nr_dev.c | ||
nr_in.c | ||
nr_loopback.c | ||
nr_out.c | ||
nr_route.c | ||
nr_subr.c | ||
nr_timer.c | ||
sysctl_net_netrom.c |