Eric Dumazet 8a533666d1 net: fix NULL dereferences in check_peer_redir() ... [ Upstream commit d3aaeb38c4, along with dependent backports of commits: 69cce1d140 9de79c127c 218fa90f07 580da35a31 f7e57044ee e049f28883 ] Gergely Kalman reported crashes in check_peer_redir(). It appears commit f39925dbde (ipv4: Cache learned redirect information in inetpeer.) added a race, leading to possible NULL ptr dereference. Since we can now change dst neighbour, we should make sure a reader can safely use a neighbour. Add RCU protection to dst neighbour, and make sure check_peer_redir() can be called safely by different cpus in parallel. As neighbours are already freed after one RCU grace period, this patch should not add typical RCU penalty (cache cold effects) Many thanks to Gergely for providing a pretty report pointing to the bug. Reported-by: Gergely Kalman <synapse@hippy.csoma.elte.hu> Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2012-02-13 11:06:13 -08:00
..
Kconfig	ipsec: ipcomp - Merge IPComp implementations	2008-07-25 02:54:40 -07:00
Makefile	xfrm: Move IPsec replay detection functions to a separate file	2011-03-13 20:22:30 -07:00
xfrm_algo.c	xfrm: Fix key lengths for rfc3686(ctr(aes))	2011-08-15 18:31:39 -07:00
xfrm_hash.c	net: allow GFP_HIGHMEM in __vmalloc()	2010-11-21 10:04:04 -08:00
xfrm_hash.h	xfrm: Const'ify address args to hash helpers.	2011-02-23 23:07:42 -08:00
xfrm_input.c	xfrm: Perform a replay check after return from async codepaths	2011-10-03 11:40:55 -07:00
xfrm_ipcomp.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
xfrm_output.c	dst: Clone child entry in skb_dst_pop	2011-03-27 17:55:01 -07:00
xfrm_policy.c	net: fix NULL dereferences in check_peer_redir()	2012-02-13 11:06:13 -08:00
xfrm_proc.c	xfrm: Introduce LINUX_MIB_XFRMFWDHDRERROR	2010-02-18 15:43:09 -08:00
xfrm_replay.c	xfrm: Fix off by one in the replay advance functions	2011-06-07 21:14:39 -07:00
xfrm_state.c	XFRM: Fix memory leak in xfrm_state_update	2011-07-08 08:58:42 -07:00
xfrm_sysctl.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
xfrm_user.c	xfrm: Check for the new replay implementation if an esn state is inserted	2011-04-26 12:46:04 -07:00