1
0
Files
linux/include/net
Herbert Xu 5c1824587f ipsec: Fix xfrm_state_walk race
As discovered by Timo Teräs, the currently xfrm_state_walk scheme
is racy because if a second dump finishes before the first, we
may free xfrm states that the first dump would walk over later.

This patch fixes this by storing the dumps in a list in order
to calculate the correct completion counter which cures this
problem.

I've expanded netlink_cb in order to accomodate the extra state
related to this.  It shouldn't be a big deal since netlink_cb
is kmalloced for each dump and we're just increasing it by 4 or
8 bytes.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-09-22 19:48:19 -07:00
..
2008-05-14 19:23:27 -05:00
2008-07-08 23:00:25 -07:00
2008-09-12 16:30:20 -07:00
2008-07-26 20:53:40 -04:00
2008-08-04 23:04:08 -07:00
2008-07-05 21:26:57 -07:00
2008-06-11 21:00:38 -07:00
2008-06-11 21:00:38 -07:00
2008-06-11 21:00:38 -07:00
2008-03-28 16:28:36 -07:00
2008-08-22 03:31:39 -07:00
2008-08-27 02:27:10 -07:00
2008-06-11 21:00:38 -07:00
2008-08-28 02:53:51 -07:00
2008-07-05 21:25:39 -07:00
2008-09-22 19:48:19 -07:00