unix/caif: sk_socket can disappear when state is unlocked
authorMark Salyzyn <salyzyn@android.com>
Tue, 26 May 2015 15:22:19 +0000 (08:22 -0700)
committerBen Hutchings <ben@decadent.org.uk>
Thu, 6 Aug 2015 23:32:16 +0000 (00:32 +0100)
commitf25e48cb938644c632f140c8bc92e0c4210ce20b
tree9a09dd7dddf868e9625fe4325137bb9c907c540c
parentdbd061fc4f55c9759b2e59f13080e1735095bbce
unix/caif: sk_socket can disappear when state is unlocked

[ Upstream commit b48732e4a48d80ed4a14812f0bab09560846514e ]

got a rare NULL pointer dereference in clear_bit

Signed-off-by: Mark Salyzyn <salyzyn@android.com>
Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
----
v2: switch to sock_flag(sk, SOCK_DEAD) and added net/caif/caif_socket.c
v3: return -ECONNRESET in upstream caller of wait function for SOCK_DEAD
Signed-off-by: David S. Miller <davem@davemloft.net>
[bwh: Backported to 3.2: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
net/caif/caif_socket.c
net/unix/af_unix.c