Xin Long
a8dd397903
sctp: use right member as the param of list_for_each_entry
...
Commit d04adf1b35 ("sctp: reset owner sk for data chunks on out queues
when migrating a sock") made a mistake that using 'list' as the param of
list_for_each_entry to traverse the retransmit, sacked and abandoned
queues, while chunks are using 'transmitted_list' to link into these
queues.
It could cause NULL dereference panic if there are chunks in any of these
queues when peeling off one asoc.
So use the chunk member 'transmitted_list' instead in this patch.
Fixes: d04adf1b35 ("sctp: reset owner sk for data chunks on out queues when migrating a sock")
Signed-off-by: Xin Long <[email protected] >
Acked-by: Marcelo Ricardo Leitner <[email protected] >
Acked-by: Neil Horman <[email protected] >
Signed-off-by: David S. Miller <[email protected] >
2017-11-28 15:55:44 -05:00
..
associola.c
net: sctp: Convert timers to use timer_setup()
2017-10-25 12:02:09 +09:00
auth.c
bind_addr.c
sctp: remove the typedef sctp_scope_t
2017-08-06 21:33:41 -07:00
chunk.c
sctp: introduce struct sctp_stream_out_ext
2017-10-03 16:27:28 -07:00
debug.c
sctp: remove the typedef sctp_subtype_t
2017-08-06 21:33:42 -07:00
endpointola.c
sctp: remove the typedef sctp_subtype_t
2017-08-06 21:33:42 -07:00
input.c
sctp: fix some type cast warnings introduced by transport rhashtable
2017-10-29 18:03:24 +09:00
inqueue.c
ipv6.c
net/sctp: Always set scope_id in sctp_inet6_skb_msgname
2017-11-16 23:00:30 +09:00
Kconfig
Makefile
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-11-04 09:26:51 +09:00
objcnt.c
sctp: remove the typedef sctp_dbg_objcnt_entry_t
2017-08-11 10:02:43 -07:00
offload.c
output.c
sctp: remove the typedef sctp_xmit_t
2017-08-06 21:33:42 -07:00
outqueue.c
sctp: introduce stream scheduler foundations
2017-10-03 16:27:29 -07:00
primitive.c
sctp: remove the typedef sctp_subtype_t
2017-08-06 21:33:42 -07:00
probe.c
sctp: remove the typedef sctp_disposition_t
2017-08-11 10:02:44 -07:00
proc.c
protocol.c
sctp: remove extern from stream sched
2017-11-28 11:00:13 -05:00
sctp_diag.c
sctp: Fix a big endian bug in sctp_diag_dump()
2017-09-26 21:16:29 -07:00
sm_make_chunk.c
sctp: check stream reset info len before making reconf chunk
2017-11-16 10:49:00 +09:00
sm_sideeffect.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-10-30 21:09:24 +09:00
sm_statefuns.c
sctp: remove the typedef sctp_disposition_t
2017-08-11 10:02:44 -07:00
sm_statetable.c
sctp: remove the typedef sctp_sm_table_entry_t
2017-08-11 10:02:44 -07:00
socket.c
sctp: use right member as the param of list_for_each_entry
2017-11-28 15:55:44 -05:00
stream.c
sctp: force SCTP_ERROR_INV_STRM with __u32 when calling sctp_chunk_fail
2017-11-28 11:00:13 -05:00
stream_sched.c
sctp: remove extern from stream sched
2017-11-28 11:00:13 -05:00
stream_sched_prio.c
sctp: remove extern from stream sched
2017-11-28 11:00:13 -05:00
stream_sched_rr.c
sctp: remove extern from stream sched
2017-11-28 11:00:13 -05:00
sysctl.c
sctp: remove the typedef sctp_scope_policy_t
2017-08-06 21:33:41 -07:00
transport.c
net: sctp: Convert timers to use timer_setup()
2017-10-25 12:02:09 +09:00
tsnmap.c
ulpevent.c
sctp: fix some type cast warnings introduced by stream reconf
2017-10-29 18:03:24 +09:00
ulpqueue.c
sctp: fix missing wake ups in some situations
2017-09-08 10:02:47 -07:00