Re: [PATCH] l2tp: fix a race in l2tp_ip_sendmsg()

From: Eric Dumazet <redacted>
Date: Fri, 08 Jun 2012 18:25:00 +0200

From: Eric Dumazet <edumazet@google.com>

Commit 081b1b1bb27f (l2tp: fix l2tp_ip_sendmsg() route handling) added
a race, in case IP route cache is disabled.

In this case, we should not do the dst_release(&rt->dst), since it'll
free the dst immediately, instead of waiting a RCU grace period.

Signed-off-by: Eric Dumazet <edumazet@google.com>

Working with a zero-ref'd object is always playing with fire even
when we "know what we are doing" :-)

Applied and queued up for -stable, thanks Eric.