diff options
| author |  Florian Westphal <fw@strlen.de>
| 2020-12-10 14:25:02 -0800 |
|---|---|---|
| committer |  Jakub Kicinski <kuba@kernel.org>
| 2020-12-14 17:30:06 -0800 |
| commit | ab82e996a1fa1b9ae514fa357d9ce8df62321157 (patch) | |
| tree | 5559cd85ee60dc779980c70a28e3f7aea64c6caf /include/net | |
| parent | mptcp: use MPTCPOPT_HMAC_LEN macro (diff) | |
| download | linux-ab82e996a1fa1b9ae514fa357d9ce8df62321157.tar.gz linux-ab82e996a1fa1b9ae514fa357d9ce8df62321157.tar.bz2 linux-ab82e996a1fa1b9ae514fa357d9ce8df62321157.zip | |
mptcp: hold mptcp socket before calling tcp_done
When processing options from tcp reset path its possible that
tcp_done(ssk) drops the last reference on the mptcp socket which
results in use-after-free.
Reviewed-by: Matthieu Baerts <matthieu.baerts@tessares.net>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Mat Martineau <mathew.j.martineau@linux.intel.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'include/net')
0 files changed, 0 insertions, 0 deletions