sctp: fix panic when T4-rto timer expire on removed transport
authorWei Yongjun <yjwei@cn.fujitsu.com>
Sun, 26 Apr 2009 15:14:42 +0000 (23:14 +0800)
committerVlad Yasevich <vladislav.yasevich@hp.com>
Wed, 3 Jun 2009 13:14:46 +0000 (09:14 -0400)
commit10a43cea7da841cf85a778a1a4d367fb2de7cbce
tree9a2accb2150d3bfa7f2efc1a824b43ca654fb7ba
parent6345b19985e9f3ec31b61720de01806e3ef680fe
sctp: fix panic when T4-rto timer expire on removed transport

If T4-rto timer is expired on a removed transport, kernel panic
will occur when we do failure management on that transport.
You can reproduce this use the following sequence:

Endpoint A                           Endpoint B
(ESTABLISHED)                        (ESTABLISHED)

            <-----------------      ASCONF
                                    (SRC=X)
ASCONF        ----------------->
(Delete IP Address = X)
            <-----------------      ASCONF-ACK
                                    (Success Indication)
            <-----------------      ASCONF
                                    (T4-rto timer expire)

This patch fixed the problem.

Signed-off-by: Wei Yongjun <yjwei@cn.fujitsu.com>
Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
net/sctp/associola.c
net/sctp/sm_statefuns.c