l2tp: protect tunnel->del_work by ref_count

Browse source

[ Upstream commit 06a15f51cf ]

There is a small chance that tunnel_free() is called before tunnel->del_work scheduled
resulting in a zero pointer dereference.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Acked-by: James Chapman <jchapman@katalix.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>

...

This commit is contained in:

Alexander Couzens 2015-09-28 11:32:42 +02:00 • committed by Sasha Levin

parent ffb04e43c0

commit 3ebbc131d6

1 changed files with 9 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

11

net/l2tp/l2tp_core.c

View file