Re: [PATCH net v2] net: rose: fix UAF bug caused by rose_t0timer_expiry
From: Jakub Kicinski <kuba@kernel.org>
Date: 2022-07-07 02:02:44
Also in:
linux-hams, lkml
On Tue, 5 Jul 2022 20:56:10 +0800 Duoming Zhou wrote:
+ del_timer_sync(&rose_neigh->t0timer);
/** * del_timer_sync - deactivate a timer and wait for the handler to finish. [...] * Synchronization rules: Callers must prevent restarting of the timer, * otherwise this function is meaningless. how is the restarting prevented? If I'm looking right rose_t0timer_expiry() rearms the timer.