Jon Maloy febafc8455 tipc: fix a potental access after delete in tipc_sk_join() ... In commit d12d2e12ce "tipc: send out join messages as soon as new member is discovered") we added a call to the function tipc_group_join() without considering the case that the preceding tipc_sk_publish() might have failed, and the group item already deleted. We fix this by returning from tipc_sk_join() directly after the failed tipc_sk_publish. Reported-by: syzbot+e3eeae78ea88b8d6d858@syzkaller.appspotmail.com Signed-off-by: Jon Maloy <jon.maloy@ericsson.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2018-01-15 13:43:51 -05:00
..
addr.c
addr.h
bcast.c	tipc: fall back to smaller MTU if allocation of local send skb fails	2017-12-01 15:21:25 -05:00
bcast.h
bearer.c	tipc: error path leak fixes in tipc_enable_bearer()	2017-12-27 10:54:59 -05:00
bearer.h
core.c
core.h	net: tipc: remove unused hardirq.h	2018-01-08 20:59:25 -05:00
discover.c	net: tipc: Convert timers to use timer_setup()	2017-11-01 12:38:45 +09:00
discover.h
eth_media.c
group.c	tipc: improve poll() for group member socket	2018-01-09 12:35:58 -05:00
group.h	tipc: improve poll() for group member socket	2018-01-09 12:35:58 -05:00
ib_media.c
Kconfig
link.c	tipc: fall back to smaller MTU if allocation of local send skb fails	2017-12-01 15:21:25 -05:00
link.h
Makefile	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-11-04 09:26:51 +09:00
monitor.c	tipc: fix tipc_mon_delete() oops in tipc_enable_bearer() error path	2017-12-27 10:55:00 -05:00
monitor.h
msg.c	tipc: fall back to smaller MTU if allocation of local send skb fails	2017-12-01 15:21:25 -05:00
msg.h	tipc: fall back to smaller MTU if allocation of local send skb fails	2017-12-01 15:21:25 -05:00
name_distr.c
name_distr.h
name_table.c	tipc: improve groupcast scope handling	2018-01-09 12:35:58 -05:00
name_table.h	tipc: improve groupcast scope handling	2018-01-09 12:35:58 -05:00
net.c
net.h
netlink.c
netlink.h
netlink_compat.c
node.c	tipc: enforce valid ratio between skb truesize and contents	2017-11-16 10:49:00 +09:00
node.h	tipc: introduce communication groups	2017-10-13 08:46:00 -07:00
server.c	tipc: improve groupcast scope handling	2018-01-09 12:35:58 -05:00
server.h	tipc: improve groupcast scope handling	2018-01-09 12:35:58 -05:00
socket.c	tipc: fix a potental access after delete in tipc_sk_join()	2018-01-15 13:43:51 -05:00
socket.h
subscr.c	tipc: improve groupcast scope handling	2018-01-09 12:35:58 -05:00
subscr.h	tipc: improve groupcast scope handling	2018-01-09 12:35:58 -05:00
sysctl.c
udp_media.c	tipc: call tipc_rcv() only if bearer is up in tipc_udp_recv()	2017-12-01 15:14:22 -05:00
udp_media.h