Re: [PATCHv2 net] sctp: hold transport before accessing its asoc in sctp_hash_transport

2018-11-30 Thread Neil Horman
On Thu, Nov 29, 2018 at 02:49:28PM +0800, Xin Long wrote: > In sctp_hash_transport, it dereferences a transport's asoc only under > rcu_read_lock. Without holding the transport, its asoc could be freed > already, which leads to a use-after-free panic. > > A similar fix as Commit bab1be79a516

Re: [PATCHv2 net] sctp: hold transport before accessing its asoc in sctp_hash_transport

2018-11-30 Thread Marcelo Ricardo Leitner
On Thu, Nov 29, 2018 at 02:49:28PM +0800, Xin Long wrote: > In sctp_hash_transport, it dereferences a transport's asoc only under > rcu_read_lock. Without holding the transport, its asoc could be freed > already, which leads to a use-after-free panic. > > A similar fix as Commit bab1be79a516

[PATCHv2 net] sctp: hold transport before accessing its asoc in sctp_hash_transport

2018-11-28 Thread Xin Long
In sctp_hash_transport, it dereferences a transport's asoc only under rcu_read_lock. Without holding the transport, its asoc could be freed already, which leads to a use-after-free panic. A similar fix as Commit bab1be79a516 ("sctp: hold transport before accessing its asoc in