kernel-hacking-2024-linux-s.../net/mptcp
Florian Westphal ab82e996a1 mptcp: hold mptcp socket before calling tcp_done
When processing options from tcp reset path its possible that
tcp_done(ssk) drops the last reference on the mptcp socket which
results in use-after-free.

Reviewed-by: Matthieu Baerts <matthieu.baerts@tessares.net>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Mat Martineau <mathew.j.martineau@linux.intel.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2020-12-14 17:30:06 -08:00
..
crypto.c
crypto_test.c
ctrl.c mptcp: add a new sysctl add_addr_timeout 2020-11-04 17:45:53 -08:00
diag.c
Kconfig mptcp: depends on IPV6 but not as a module 2020-10-21 08:05:40 -07:00
Makefile
mib.c mptcp: print new line in mptcp_seq_show() if mptcp isn't in use 2020-12-07 17:45:29 -08:00
mib.h mptcp: add RM_ADDR related mibs 2020-09-24 19:58:34 -07:00
mptcp_diag.c mptcp: avoid a few atomic ops in the rx path 2020-11-30 17:55:23 -08:00
options.c mptcp: link MPC subflow into msk only after accept 2020-12-09 19:31:58 -08:00
pm.c mptcp: link MPC subflow into msk only after accept 2020-12-09 19:31:58 -08:00
pm_netlink.c mptcp: remove address when netlink flushes addrs 2020-12-14 17:30:06 -08:00
protocol.c mptcp: be careful on subflows shutdown 2020-12-09 19:31:58 -08:00
protocol.h mptcp: use MPTCPOPT_HMAC_LEN macro 2020-12-14 17:30:06 -08:00
subflow.c mptcp: hold mptcp socket before calling tcp_done 2020-12-14 17:30:06 -08:00
syncookies.c
token.c mptcp: token: fix unititialized variable 2020-11-03 13:08:30 -08:00
token_test.c