diff options
| author | nikolay@redhat.com <nikolay@redhat.com> | 2012-11-29 01:37:59 (GMT) |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2012-11-29 18:13:15 (GMT) |
| commit | e196c0e579902f42cf72414461fb034e5a1ffbf7 (patch) | |
| tree | fb17f8a56d9e8f51c26cfd6b4abf0212aa617aee /net/ipv6/xfrm6_input.c | |
| parent | 90fb6250c509cabd425b7ae4524053dba2e27e2c (diff) | |
| download | linux-fsl-qoriq-e196c0e579902f42cf72414461fb034e5a1ffbf7.tar.xz | |
bonding: fix race condition in bonding_store_slaves_active
Race between bonding_store_slaves_active() and slave manipulation
functions. The bond_for_each_slave use in bonding_store_slaves_active()
is not protected by any synchronization mechanism.
NULL pointer dereference is easy to reach.
Fixed by acquiring the bond->lock for the slave walk.
v2: Make description text < 75 columns
Signed-off-by: Nikolay Aleksandrov <nikolay@redhat.com>
Signed-off-by: Jay Vosburgh <fubar@us.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6/xfrm6_input.c')
0 files changed, 0 insertions, 0 deletions