mirror of
https://github.com/torvalds/linux.git
synced 2024-11-10 14:11:52 +00:00
net: fix __sock_gen_cookie()
I was mistaken how atomic64_try_cmpxchg(&sk_cookie, &res, new)
is working.
I was assuming @res would contain the final sk_cookie value,
regardless of the success of our cmpxchg()
We could do something like:
if (atomic64_try_cmpxchg(&sk_cookie, &res, new)
res = new;
But we can avoid a conditional and read sk_cookie again.
atomic64_cmpxchg(&sk_cookie, res, new);
res = atomic64_read(&sk_cookie);
Reported-by: coverity-bot <keescook+coverity-bot@chromium.org>
Addresses-Coverity-ID: 1527347 ("Error handling issues")
Fixes: 4ebf802cf1
("net: __sock_gen_cookie() cleanup")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Link: https://lore.kernel.org/r/20221118043843.3703186-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
This commit is contained in:
parent
2c45455ea1
commit
32634819ad
@ -30,7 +30,10 @@ u64 __sock_gen_cookie(struct sock *sk)
|
||||
if (!res) {
|
||||
u64 new = gen_cookie_next(&sock_cookie);
|
||||
|
||||
atomic64_try_cmpxchg(&sk->sk_cookie, &res, new);
|
||||
atomic64_cmpxchg(&sk->sk_cookie, res, new);
|
||||
|
||||
/* Another thread might have changed sk_cookie before us. */
|
||||
res = atomic64_read(&sk->sk_cookie);
|
||||
}
|
||||
return res;
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user