summaryrefslogtreecommitdiff
path: root/drivers/vhost
diff options
context:
space:
mode:
authorCong Wang <xiyou.wangcong@gmail.com>2018-08-07 12:41:38 -0700
committerDavid S. Miller <davem@davemloft.net>2018-08-07 15:54:00 -0700
commit0dcb82254d65f72333aa50ad626d1e9665ad093b (patch)
tree0624bb5c365884b956d4abaf79d50e87a1406762 /drivers/vhost
parent61ef4b07fcdc30535889990cf4229766502561cf (diff)
llc: use refcount_inc_not_zero() for llc_sap_find()
llc_sap_put() decreases the refcnt before deleting sap from the global list. Therefore, there is a chance llc_sap_find() could find a sap with zero refcnt in this global list. Close this race condition by checking if refcnt is zero or not in llc_sap_find(), if it is zero then it is being removed so we can just treat it as gone. Reported-by: <syzbot+278893f3f7803871f7ce@syzkaller.appspotmail.com> Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/vhost')
0 files changed, 0 insertions, 0 deletions