Fix NULL pointer dereference in tcp_nuke_addr.
authorLorenzo Colitti <lorenzo@google.com>
Mon, 14 Sep 2015 15:14:23 +0000 (00:14 +0900)
committerHuang, Tao <huangtao@rock-chips.com>
Tue, 27 Oct 2015 08:46:47 +0000 (16:46 +0800)
commitabe081915ca38fa25e51290ff0081c6a3489e990
tree25f4ccce096888b9d941b1aa81f97b1649972918
parent0f5728d8fa8c9bdd24cfc978813f47471d890854
Fix NULL pointer dereference in tcp_nuke_addr.

tcp_nuke addr only grabs the bottom half socket lock, but not the
userspace socket lock. This allows a userspace program to call
close() while the socket is running, which causes a NULL pointer
dereference in inet_put_port.

Bug: 23663111
Bug: 24072792
Change-Id: Iecb63af68c2db4764c74785153d1c9054f76b94f
Signed-off-by: Lorenzo Colitti <lorenzo@google.com>
(cherry picked from commit 74d66ee756afcc3269e4c1341f793c52be629af9)
net/ipv4/tcp.c