Eric Dumazet 7eadfacd2b ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero ...

[ Upstream commit 65a3c497c0 ]

Before taking a refcount, make sure the object is not already
scheduled for deletion.

Same fix is needed in ipv6_flowlabel_opt()

Fixes: 18367681a1 ("ipv6 flowlabel: Convert np->ipv6_fl_list to RCU.")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-06-22 08:15:13 +02:00

..

ila

ila: Fix rhashtable walker list corruption

2019-04-03 06:26:18 +02:00

netfilter

netfilter: ip6t_srh: fix NULL pointer dereferences

2019-05-04 09:20:12 +02:00

addrconf_core.c

net/ipv6: Add helper to return path MTU based on fib result

2018-05-22 10:51:09 +02:00

addrconf.c

net: fix IPv6 prefix route residue

2019-02-23 09:07:24 +01:00

addrlabel.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00

af_inet6.c

ipv6: Consider sk_bound_dev_if when binding a socket to an address

2019-02-06 17:30:06 +01:00

ah6.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2017-11-15 11:56:19 -08:00

anycast.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2018-06-06 18:39:49 -07:00

calipso.c

ipv6: make ipv6_renew_options() interrupt/kernel safe

2018-07-05 20:15:26 +09:00

datagram.c

ip: on queued skb use skb_header_pointer instead of pskb_may_pull

2019-01-22 21:40:31 +01:00

esp6_offload.c

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

2018-07-27 09:33:37 -07:00

esp6.c

esp: Skip TX bytes accounting when sending from a request socket

2019-03-23 20:09:48 +01:00

exthdrs_core.c

net: ipv6: Fix typo in ipv6_find_hdr() documentation

2018-05-07 23:50:27 -04:00

exthdrs_offload.c

…

exthdrs.c

ipv6: make ipv6_renew_options() interrupt/kernel safe

2018-07-05 20:15:26 +09:00

fib6_notifier.c

net: Add module reference to FIB notifiers

2017-09-01 20:33:42 -07:00

fib6_rules.c

net/ipv6: Add fib6_lookup

2018-05-11 00:10:56 +02:00

fou6.c

…

icmp.c

ipv6: make icmp6_send() robust against null skb->dev

2019-01-22 21:40:35 +01:00

inet6_connection_sock.c

…

inet6_hashtables.c

bpf: Enable BPF_PROG_TYPE_SK_REUSEPORT bpf prog in reuseport selection

2018-08-11 01:58:46 +02:00

ip6_checksum.c

net: udp: fix handling of CHECKSUM_COMPLETE packets

2018-11-04 14:50:51 +01:00

ip6_fib.c

ipv6: prevent possible fib6 leaks

2019-05-25 18:23:18 +02:00

ip6_flowlabel.c

ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero

2019-06-22 08:15:13 +02:00

ip6_gre.c

net: ip6_gre: fix possible NULL pointer dereference in ip6erspan_set_version

2019-04-20 09:16:03 +02:00

ip6_icmp.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

ip6_input.c

net: use skb_list_del_init() to remove from RX sublists

2018-12-17 09:24:27 +01:00

ip6_offload.c

gso_segment: Reset skb->mac_len after modifying network header

2018-09-13 12:09:32 -07:00

ip6_offload.h

…

ip6_output.c

ipv6: Fix dangling pointer when ipv6 fragment

2019-04-17 08:38:40 +02:00

ip6_tunnel.c

ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type

2019-04-17 08:38:40 +02:00

ip6_udp_tunnel.c

ipv6: explicitly initialize udp6_addr in udp_sock_create6()

2019-01-09 17:38:31 +01:00

ip6_vti.c

ip: validate header length on virtual device xmit

2019-01-09 17:38:31 +01:00

ip6mr.c

ip6mr: Do not call __IP6_INC_STATS() from preemptible context

2019-03-10 07:17:16 +01:00

ipcomp6.c

…

ipv6_sockglue.c

Merge ra.kernel.org:/pub/scm/linux/kernel/git/torvalds/linux

2018-07-20 21:17:12 -07:00

Kconfig

net: remove blank lines at end of file

2018-07-24 14:10:43 -07:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mcast_snoop.c

…

mcast.c

ipv6: mcast: fix a use-after-free in inet6_mc_check

2018-10-15 22:38:55 -07:00

mip6.c

…

ndisc.c

ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called

2018-11-04 14:50:51 +01:00

netfilter.c

netfilter: ipv6: Don't preserve original oif for loopback address

2019-02-27 10:09:03 +01:00

output_core.c

inet: switch IP ID generator to siphash

2019-06-04 08:02:30 +02:00

ping.c

ipv6: fold sockcm_cookie into ipcm6_cookie

2018-07-07 10:58:49 +09:00

proc.c

proc: introduce proc_create_net_single

2018-05-16 07:24:30 +02:00

protocol.c

…

raw.c

ipv6: fix EFAULT on sendto with icmpv6 and hdrincl

2019-06-11 12:20:50 +02:00

reassembly.c

net: IP6 defrag: use rbtrees for IPv6 defrag

2019-04-27 09:36:33 +02:00

route.c

ipv6: Fix redirect with VRF

2019-06-04 08:02:31 +02:00

seg6_hmac.c

Merge ra.kernel.org:/pub/scm/linux/kernel/git/davem/net

2018-07-03 10:29:26 +09:00

seg6_iptunnel.c

ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation

2019-02-06 17:30:06 +01:00

seg6_local.c

bpf: add End.DT6 action to bpf_lwt_seg6_action helper

2018-07-31 09:22:48 +02:00

seg6.c

ipv6: propagate genlmsg_reply return code

2019-02-27 10:08:58 +01:00

sit.c

vrf: sit mtu should not be updated when vrf netdev is the link

2019-05-16 19:41:30 +02:00

syncookies.c

net/ipv4: disable SMC TCP option with SYN Cookies

2018-03-25 20:53:54 -04:00

sysctl_net_ipv6.c

ipv6: sr: Compute flowlabel for outer IPv6 header of seg6 encap mode

2018-04-25 13:02:15 -04:00

tcp_ipv6.c

tcp: do not use ipv6 header for ipv4 flow

2019-04-03 06:26:18 +02:00

tcpv6_offload.c

net: Convert GRO SKB handling to list_head.

2018-06-26 11:33:04 +09:00

tunnel6.c

…

udp_impl.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

udp_offload.c

net: Convert GRO SKB handling to list_head.

2018-06-26 11:33:04 +09:00

udp.c

bpf: Fix [::] -> [::1] rewrite in sys_sendmsg

2019-02-27 10:08:52 +01:00

udplite.c

proc: introduce proc_create_net{,_data}

2018-05-16 07:24:30 +02:00

xfrm6_input.c

xfrm: reset transport header back to network header after all input transforms ahave been applied

2018-09-04 10:26:30 +02:00

xfrm6_mode_beet.c

networking: make skb_pull & friends return void pointers

2017-06-16 11:48:39 -04:00

xfrm6_mode_ro.c

ipv6: xfrm: use 64-bit timestamps

2018-07-11 15:26:35 +02:00

xfrm6_mode_transport.c

xfrm: reset transport header back to network header after all input transforms ahave been applied

2018-09-04 10:26:30 +02:00

xfrm6_mode_tunnel.c

xfrm: Verify MAC header exists before overwriting eth_hdr(skb)->h_proto

2018-03-07 10:54:29 +01:00

xfrm6_output.c

xfrm6: call kfree_skb when skb is toobig

2018-09-03 07:37:57 +02:00

xfrm6_policy.c

net/xfrm: fix out-of-bounds packet access

2018-10-11 13:24:46 +02:00

xfrm6_protocol.c

…

xfrm6_state.c

xfrm: remove VLA usage in __xfrm6_sort()

2018-04-26 07:51:48 +02:00

xfrm6_tunnel.c

xfrm: clean up xfrm protocol checks

2019-05-25 18:23:41 +02:00