| commit | d35690beda1429544d46c8eb34b2e3a8c37ab299 | |
| author | Masayuki Nakagawa <nakagawa.msy@ncos.nec.co.jp> | |
| Fri, 16 Mar 2007 23:14:03 +0000 (16 16:14 -0700) | ||
| committer | David S. Miller <davem@davemloft.net> | |
| Fri, 16 Mar 2007 23:14:03 +0000 (16 16:14 -0700) | ||
| tree | a9f87fa226d8f687c0072409ccb3c7ff0d60698d | treesnapshot (tar.gz zip) |
| parent | 53cdcc04c1e85d4e423b2822b66149b6f2e52c2c | commitdiff |
[IPV6]: ipv6_fl_socklist is inadvertently shared.
The ipv6_fl_socklist from listening socket is inadvertently shared
with new socket created for connection. This leads to a variety of
interesting, but fatal, bugs. For example, removing one of the
sockets may lead to the other socket's encountering a page fault
when the now freed list is referenced.
The fix is to not share the flow label list with the new socket.
Signed-off-by: Masayuki Nakagawa <nakagawa.msy@ncos.nec.co.jp>
Signed-off-by: David S. Miller <davem@davemloft.net>
The ipv6_fl_socklist from listening socket is inadvertently shared
with new socket created for connection. This leads to a variety of
interesting, but fatal, bugs. For example, removing one of the
sockets may lead to the other socket's encountering a page fault
when the now freed list is referenced.
The fix is to not share the flow label list with the new socket.
Signed-off-by: Masayuki Nakagawa <nakagawa.msy@ncos.nec.co.jp>
Signed-off-by: David S. Miller <davem@davemloft.net>
| net/ipv6/tcp_ipv6.c | diffblobblamehistory |