Matt Johnston dc121c0084 mctp: make __mctp_dev_get() take a refcount hold ...

Previously there was a race that could allow the mctp_dev refcount
to hit zero:

rcu_read_lock();
mdev = __mctp_dev_get(dev);
// mctp_unregister() happens here, mdev->refs hits zero
mctp_dev_hold(dev);
rcu_read_unlock();

Now we make __mctp_dev_get() take the hold itself. It is safe to test
against the zero refcount because __mctp_dev_get() is called holding
rcu_read_lock and mctp_dev uses kfree_rcu().

Reported-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Matt Johnston <matt@codeconstruct.com.au>
Signed-off-by: David S. Miller <davem@davemloft.net>

2022-02-23 12:29:15 +00:00

..

test

mctp: make __mctp_dev_get() take a refcount hold

2022-02-23 12:29:15 +00:00

af_mctp.c

mctp: Add SIOCMCTP{ALLOC,DROP}TAG ioctls for tag control

2022-02-09 12:00:11 +00:00

device.c

mctp: make __mctp_dev_get() take a refcount hold

2022-02-23 12:29:15 +00:00

Kconfig

mctp: Add flow extension to skb

2021-10-29 13:23:51 +01:00

Makefile

mctp: Add test utils

2021-10-03 14:35:41 +01:00

neigh.c

mctp: replace mctp_address_ok with more fine-grained helpers

2022-02-18 21:24:28 -08:00

route.c

mctp: make __mctp_dev_get() take a refcount hold

2022-02-23 12:29:15 +00:00