diff options
| author | Tomas Bortoli <tomasbortoli@gmail.com> | 2018-07-23 20:42:53 +0200 |
|---|---|---|
| committer | Dominique Martinet <dominique.martinet@cea.fr> | 2018-08-13 09:34:58 +0900 |
| commit | 9f476d7c540cb57556d3cc7e78704e6cd5100f5f (patch) | |
| tree | d4892ba2088c3022a47fc7db4fe7b2ecea5ebe4a /net/9p/client.c | |
| parent | 430ac66eb4c5b5c4eb846b78ebf65747510b30f1 (diff) | |
net/9p/trans_fd.c: fix race by holding the lock
It may be possible to run p9_fd_cancel() with a deleted req->req_list
and incur in a double del. To fix hold the client->lock while changing
the status, so the other threads will be synchronized.
Link: http://lkml.kernel.org/r/20180723184253.6682-1-tomasbortoli@gmail.com
Signed-off-by: Tomas Bortoli <tomasbortoli@gmail.com>
Reported-by: syzbot+735d926e9d1317c3310c@syzkaller.appspotmail.com
To: Eric Van Hensbergen <ericvh@gmail.com>
To: Ron Minnich <rminnich@sandia.gov>
To: Latchesar Ionkov <lucho@ionkov.net>
Cc: Yiwen Jiang <jiangyiwen@huwei.com>
Cc: David S. Miller <davem@davemloft.net>
Signed-off-by: Dominique Martinet <dominique.martinet@cea.fr>
Diffstat (limited to 'net/9p/client.c')
0 files changed, 0 insertions, 0 deletions