shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-06 02:50:49 +09:00
Code Issues Packages Projects Releases Wiki Activity

net: annotate sk->sk_err write from do_recvmmsg()

Browse Source 
[ Upstream commit e05a5f510f ]

do_recvmmsg() can write to sk->sk_err from multiple threads.

As said before, many other points reading or writing sk_err
need annotations.

Fixes: 34b88a68f2 ("net: Fix use after free in the recvmmsg exit path")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: syzbot <syzkaller@googlegroups.com>
Reviewed-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
This commit is contained in:
Eric Dumazet
2023-05-09 16:35:53 +00:00
committed by Greg Kroah-Hartman
parent a115dadf89
commit bd0f360ee8
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
net/socket.c
View File

@@ -2890,7 +2890,7 @@ static int do_recvmmsg(int fd, struct mmsghdr __user *mmsg,
* error to return on the next call or if the * error to return on the next call or if the
* app asks about it using getsockopt(SO_ERROR). * app asks about it using getsockopt(SO_ERROR).
*/ */
sock->sk->sk_err = -err; WRITE_ONCE(sock->sk->sk_err, -err);
} }
out_put: out_put:
fput_light(sock->file, fput_needed); fput_light(sock->file, fput_needed);