diff options
| author | Florian Westphal <fw@strlen.de> | 2022-02-25 14:02:41 +0100 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2022-03-01 11:48:18 +0100 |
| commit | 747670fd9a2d1b7774030dba65ca022ba442ce71 (patch) | |
| tree | 55bcfe9e9cbaf2adc31675dbd78ec97ffb612e11 /tools/usb | |
| parent | 17a8f31bba7bac8cce4bd12bab50697da96e7710 (diff) | |
netfilter: nf_queue: don't assume sk is full socket
There is no guarantee that state->sk refers to a full socket.
If refcount transitions to 0, sock_put calls sk_free which then ends up
with garbage fields.
I'd like to thank Oleksandr Natalenko and Jiri Benc for considerable
debug work and pointing out state->sk oddities.
Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets instead of listener")
Tested-by: Oleksandr Natalenko <oleksandr@redhat.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'tools/usb')
0 files changed, 0 insertions, 0 deletions