All of lore.kernel.org
 help / color / mirror / Atom feed
* Re: [PATCH net] net/rds: An rds_sock is added too early to the hash table
       [not found] <1568195885-6285-1-git-send-email-ka-cheong.poon@oracle.com>
@ 2019-09-11 14:06 ` David Miller
  0 siblings, 0 replies; only message in thread
From: David Miller @ 2019-09-11 14:06 UTC (permalink / raw)
  To: ka-cheong.poon; +Cc: netdev, santosh.shilimkar, rds-devel

From: Ka-Cheong Poon <ka-cheong.poon@oracle.com>
Date: Wed, 11 Sep 2019 02:58:05 -0700

> In rds_bind(), an rds_sock is added to the RDS bind hash table before
> rs_transport is set.  This means that the socket can be found by the
> receive code path when rs_transport is NULL.  And the receive code
> path de-references rs_transport for congestion update check.  This can
> cause a panic.  An rds_sock should not be added to the bind hash table
> before all the needed fields are set.
> 
> Reported-by: syzbot+4b4f8163c2e246df3c4c@syzkaller.appspotmail.com
> Signed-off-by: Ka-Cheong Poon <ka-cheong.poon@oracle.com>

Applied.

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2019-09-11 14:06 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
     [not found] <1568195885-6285-1-git-send-email-ka-cheong.poon@oracle.com>
2019-09-11 14:06 ` [PATCH net] net/rds: An rds_sock is added too early to the hash table David Miller

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.