Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
We got slightly different patches removing a double word
in a comment in net/ipv4/raw.c - picked the version from net.
Simple conflict in drivers/net/ethernet/ibm/ibmvnic.c. Use cached
values instead of VNIC login response buffer (following what
commit 507ebe6444 ("ibmvnic: Fix use-after-free of VNIC login
response buffer") did).
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
This commit is contained in:
@@ -326,7 +326,8 @@ static void tipc_aead_free(struct rcu_head *rp)
|
||||
if (aead->cloned) {
|
||||
tipc_aead_put(aead->cloned);
|
||||
} else {
|
||||
head = *this_cpu_ptr(aead->tfm_entry);
|
||||
head = *get_cpu_ptr(aead->tfm_entry);
|
||||
put_cpu_ptr(aead->tfm_entry);
|
||||
list_for_each_entry_safe(tfm_entry, tmp, &head->list, list) {
|
||||
crypto_free_aead(tfm_entry->tfm);
|
||||
list_del(&tfm_entry->list);
|
||||
@@ -399,10 +400,15 @@ static void tipc_aead_users_set(struct tipc_aead __rcu *aead, int val)
|
||||
*/
|
||||
static struct crypto_aead *tipc_aead_tfm_next(struct tipc_aead *aead)
|
||||
{
|
||||
struct tipc_tfm **tfm_entry = this_cpu_ptr(aead->tfm_entry);
|
||||
struct tipc_tfm **tfm_entry;
|
||||
struct crypto_aead *tfm;
|
||||
|
||||
tfm_entry = get_cpu_ptr(aead->tfm_entry);
|
||||
*tfm_entry = list_next_entry(*tfm_entry, list);
|
||||
return (*tfm_entry)->tfm;
|
||||
tfm = (*tfm_entry)->tfm;
|
||||
put_cpu_ptr(tfm_entry);
|
||||
|
||||
return tfm;
|
||||
}
|
||||
|
||||
/**
|
||||
|
||||
@@ -536,7 +536,7 @@ void tipc_group_filter_msg(struct tipc_group *grp, struct sk_buff_head *inputq,
|
||||
update = true;
|
||||
deliver = false;
|
||||
}
|
||||
/* Fall thru */
|
||||
fallthrough;
|
||||
case TIPC_GRP_BCAST_MSG:
|
||||
m->bc_rcv_nxt++;
|
||||
ack = msg_grp_bc_ack_req(hdr);
|
||||
|
||||
@@ -2770,18 +2770,21 @@ static int tipc_shutdown(struct socket *sock, int how)
|
||||
|
||||
trace_tipc_sk_shutdown(sk, NULL, TIPC_DUMP_ALL, " ");
|
||||
__tipc_shutdown(sock, TIPC_CONN_SHUTDOWN);
|
||||
sk->sk_shutdown = SEND_SHUTDOWN;
|
||||
if (tipc_sk_type_connectionless(sk))
|
||||
sk->sk_shutdown = SHUTDOWN_MASK;
|
||||
else
|
||||
sk->sk_shutdown = SEND_SHUTDOWN;
|
||||
|
||||
if (sk->sk_state == TIPC_DISCONNECTING) {
|
||||
/* Discard any unreceived messages */
|
||||
__skb_queue_purge(&sk->sk_receive_queue);
|
||||
|
||||
/* Wake up anyone sleeping in poll */
|
||||
sk->sk_state_change(sk);
|
||||
res = 0;
|
||||
} else {
|
||||
res = -ENOTCONN;
|
||||
}
|
||||
/* Wake up anyone sleeping in poll. */
|
||||
sk->sk_state_change(sk);
|
||||
|
||||
release_sock(sk);
|
||||
return res;
|
||||
|
||||
Reference in New Issue
Block a user