Rémi Denis-Courmont 9d5523e065 phonet/pep: fix racy skb_queue_empty() use ...

[ Upstream commit 7d2a894d7f ]

The receive queues are protected by their respective spin-lock, not
the socket lock. This could lead to skb_peek() unexpectedly
returning NULL or a pointer to an already dequeued socket buffer.

Fixes: 9641458d3e ("Phonet: Pipe End Point for Phonet Pipes protocol")
Signed-off-by: Rémi Denis-Courmont <courmisch@gmail.com>
Link: https://lore.kernel.org/r/20240218081214.4806-2-remi@remlab.net
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-03-01 13:26:38 +01:00

..

af_phonet.c

…

datagram.c

phonet: take correct lock to peek at the RX queue

2024-03-01 13:26:38 +01:00

Kconfig

…

Makefile

…

pep-gprs.c

…

pep.c

phonet/pep: fix racy skb_queue_empty() use

2024-03-01 13:26:38 +01:00

pn_dev.c

…

pn_netlink.c

…

socket.c

…

sysctl.c

…