Thread (2 messages) flat view 2 messages, 2 authors, 2018-01-15

Re: [net-next 1/1] tipc: fix a potental access after delete in tipc_sk_join()

From: David Miller <davem@davemloft.net>
Date: 2018-01-15 18:44:06

From: Jon Maloy <redacted>
Date: Wed, 10 Jan 2018 21:08:50 +0100
In commit d12d2e12cec2 "tipc: send out join messages as soon as new
member is discovered") we added a call to the function tipc_group_join()
without considering the case that the preceding tipc_sk_publish() might
have failed, and the group item already deleted.

We fix this by returning from tipc_sk_join() directly after the
failed tipc_sk_publish.

Reported-by: syzbot+e3eeae78ea88b8d6d858@syzkaller.appspotmail.com
Signed-off-by: Jon Maloy <redacted>
Applied, thanks Jon.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help