mirror of
https://github.com/torvalds/linux.git
synced 2024-11-13 07:31:45 +00:00
14a4696bc3
When closing the isotp socket, the potentially running hrtimers are
canceled before removing the subscription for CAN identifiers via
can_rx_unregister().
This may lead to an unintended (re)start of a hrtimer in
isotp_rcv_cf() and isotp_rcv_fc() in the case that a CAN frame is
received by isotp_rcv() while the subscription removal is processed.
However, isotp_rcv() is called under RCU protection, so after calling
can_rx_unregister, we may call synchronize_rcu in order to wait for
any RCU read-side critical sections to finish. This prevents the
reception of CAN frames after hrtimer_cancel() and therefore the
unintended (re)start of the hrtimers.
Link: https://lore.kernel.org/r/20210618173713.2296-1-socketcan@hartkopp.net
Fixes:
|
||
---|---|---|
.. | ||
j1939 | ||
af_can.c | ||
af_can.h | ||
bcm.c | ||
gw.c | ||
isotp.c | ||
Kconfig | ||
Makefile | ||
proc.c | ||
raw.c |