xt_qtaguid: Fix panic caused by processing non-full socket.
authorJohn Stultz <john.stultz@linaro.org>
Thu, 12 May 2016 18:17:52 +0000 (11:17 -0700)
committerAmit Pundir <amit.pundir@linaro.org>
Thu, 19 May 2016 07:05:13 +0000 (12:35 +0530)
commit4158b3431f473aad101da1100a9b241ff8b3cc74
tree1950e0732f819823a032b895a9f124d3c4c29e99
parentf73ca028a0a4cc307597efc6ef2c910dc2d20639
xt_qtaguid: Fix panic caused by processing non-full socket.

In an issue very similar to 4e461c777e3 (xt_qtaguid: Fix panic
caused by synack processing), we were seeing panics on occasion
in testing.

In this case, it was the same issue, but caused by a different
call path, as the sk being returned from qtaguid_find_sk() was
not a full socket. Resulting in the sk->sk_socket deref to fail.

This patch adds an extra check to ensure the sk being retuned
is a full socket, and if not it returns NULL.

Reported-by: Milosz Wasilewski <milosz.wasilewski@linaro.org>
Signed-off-by: John Stultz <john.stultz@linaro.org>
net/netfilter/xt_qtaguid.c