linux-uconsole/drivers/net/bonding
nikolay@redhat.com cefbc05835 bonding: fix race condition in bonding_store_slaves_active
[ Upstream commit e196c0e579 ]

Race between bonding_store_slaves_active() and slave manipulation
 functions. The bond_for_each_slave use in bonding_store_slaves_active()
 is not protected by any synchronization mechanism.
 NULL pointer dereference is easy to reach.
 Fixed by acquiring the bond->lock for the slave walk.

 v2: Make description text < 75 columns

Signed-off-by: Nikolay Aleksandrov <nikolay@redhat.com>
Signed-off-by: Jay Vosburgh <fubar@us.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2013-01-11 09:03:35 -08:00
..
bond_3ad.c net: bonding: factor out rlock(bond->lock) in xmit path 2011-05-09 12:05:59 -07:00
bond_3ad.h Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2011-05-17 17:33:11 -04:00
bond_alb.c bonding: fix enslaving in alb mode when link down 2012-02-03 09:19:03 -08:00
bond_alb.h bonding: move processing of recv handlers into handle_frame() 2011-04-25 12:00:30 -07:00
bond_debugfs.c bonding: add the debugfs interface to see RLB hash table 2010-12-16 13:16:05 -08:00
bond_ipv6.c bonding/vlan: Fix mangled NAs on slaves without VLAN tag insertion 2010-12-16 12:43:22 -08:00
bond_main.c bonding: Bonding driver does not consider the gso_max_size/gso_max_segs setting of slave devices. 2013-01-11 09:03:34 -08:00
bond_procfs.c net-bonding: Fix minor sparse complaints 2011-04-14 22:00:31 -07:00
bond_sysfs.c bonding: fix race condition in bonding_store_slaves_active 2013-01-11 09:03:35 -08:00
bonding.h net: drivers: kill two unused macro definitions 2011-05-15 18:01:15 -04:00
Makefile bonding, ipv4, ipv6, vlan: Handle NETDEV_BONDING_FAILOVER like NETDEV_NOTIFY_PEERS 2011-04-17 23:36:03 -07:00