unix/caif: sk_socket can disappear when state is unlocked
authorMark Salyzyn <salyzyn@android.com>
Tue, 26 May 2015 15:22:19 +0000 (08:22 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 22 Jun 2015 23:55:51 +0000 (16:55 -0700)
commit7659c93447344c3e6344e3e2dcdd53fe984eba7c
tree1f3b32d043e65bcb8f3e9a7e5f7aa96d5b91e0e3
parent5385d8c4fb469f30da461db3800a715fd405b28f
unix/caif: sk_socket can disappear when state is unlocked

[ Upstream commit b48732e4a48d80ed4a14812f0bab09560846514e ]

got a rare NULL pointer dereference in clear_bit

Signed-off-by: Mark Salyzyn <salyzyn@android.com>
Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
----
v2: switch to sock_flag(sk, SOCK_DEAD) and added net/caif/caif_socket.c
v3: return -ECONNRESET in upstream caller of wait function for SOCK_DEAD
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/caif/caif_socket.c
net/unix/af_unix.c