Re: [PATCH net] tcp: fix potential double free issue for fastopen_req

2017-03-02 Thread David Miller
From: Wei Wang Date: Wed, 1 Mar 2017 13:29:48 -0800 > From: Wei Wang > > tp->fastopen_req could potentially be double freed if a malicious > user does the following: > 1. Enable TCP_FASTOPEN_CONNECT sockopt and do a connect() on the socket. > 2. Call

[PATCH net] tcp: fix potential double free issue for fastopen_req

2017-03-01 Thread Wei Wang
From: Wei Wang tp->fastopen_req could potentially be double freed if a malicious user does the following: 1. Enable TCP_FASTOPEN_CONNECT sockopt and do a connect() on the socket. 2. Call connect() with AF_UNSPEC to disconnect the socket. 3. Make this socket a listening socket