Aditya Pakki 0c85a7e874 net/rds: Avoid potential use after free in rds_send_remove_from_sock ...

In case of rs failure in rds_send_remove_from_sock(), the 'rm' resource
is freed and later under spinlock, causing potential use-after-free.
Set the free pointer to NULL to avoid undefined behavior.

Signed-off-by: Aditya Pakki <pakki001@umn.edu>
Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2021-04-07 14:01:24 -07:00

..

af_rds.c

net: pass a sockptr_t into ->setsockopt

2020-07-24 15:41:54 -07:00

bind.c

net/rds: Check laddr_check before calling it

2019-09-27 12:10:55 +02:00

cong.c

net: rds: delete duplicated words

2020-09-18 14:12:43 -07:00

connection.c

rds: If one path needs re-connection, check all and re-connect

2020-07-01 17:35:17 -07:00

ib_cm.c

rds: stop using dmapool

2020-11-17 15:22:06 -04:00

ib_frmr.c

RDMA/rds: Remove FMR support for memory registration

2020-06-02 20:32:53 -03:00

ib_mr.h

RDMA/rds: Remove FMR support for memory registration

2020-06-02 20:32:53 -03:00

ib_rdma.c

RDMA/rds: Remove FMR support for memory registration

2020-06-02 20:32:53 -03:00

ib_recv.c

rds: stop using dmapool

2020-11-17 15:22:06 -04:00

ib_ring.c

…

ib_send.c

rds: stop using dmapool

2020-11-17 15:22:06 -04:00

ib_stats.c

net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'

2019-09-15 20:56:19 +02:00

ib_sysctl.c

…

ib.c

rds: stop using dmapool

2020-11-17 15:22:06 -04:00

ib.h

rds: stop using dmapool

2020-11-17 15:22:06 -04:00

info.c

rds: fix crash in rds_info_getsockopt()

2020-05-20 14:08:06 -07:00

info.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

Kconfig

treewide: replace '---help---' in Kconfig files with 'help'

2020-06-14 01:57:21 +09:00

loop.c

rds: Changing IP address internal representation to struct in6_addr

2018-07-23 21:17:44 -07:00

loop.h

rds: clean up loopback rds_connections on netns deletion

2018-06-27 10:11:03 +09:00

Makefile

RDMA/rds: Remove FMR support for memory registration

2020-06-02 20:32:53 -03:00

message.c

net/rds: Avoid potential use after free in rds_send_remove_from_sock

2021-04-07 14:01:24 -07:00

page.c

rds: remove dead code

2016-12-26 21:35:39 -05:00

rdma_transport.c

net: rds: add service level support in rds-info

2019-08-24 16:55:25 -07:00

rdma_transport.h

net: rds: rdma_transport.h: delete duplicated word

2020-07-19 18:14:51 -07:00

rdma.c

net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS

2021-02-02 08:44:08 -08:00

rds_single_path.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

rds.h

net: pass a sockptr_t into ->setsockopt

2020-07-24 15:41:54 -07:00

recv.c

rds: Prevent kernel-infoleak in rds_notify_queue_get()

2020-07-31 16:52:48 -07:00

send.c

net/rds: Avoid potential use after free in rds_send_remove_from_sock

2021-04-07 14:01:24 -07:00

stats.c

rds: check for excessive looping in rds_send_xmit

2019-08-15 12:04:24 -07:00

sysctl.c

net: rds: fix coding style issues

2016-06-18 21:34:09 -07:00

tcp_connect.c

net: add sock_no_linger

2020-05-28 11:11:44 -07:00

tcp_listen.c

tcp: add tcp_sock_set_keepcnt

2020-05-28 11:11:45 -07:00

tcp_recv.c

rds: Changing IP address internal representation to struct in6_addr

2018-07-23 21:17:44 -07:00

tcp_send.c

tcp: add tcp_sock_set_cork

2020-05-28 11:11:45 -07:00

tcp_stats.c

…

tcp.c

tcp: add tcp_sock_set_nodelay

2020-05-28 11:11:45 -07:00

tcp.h

tcp: add tcp_sock_set_keepcnt

2020-05-28 11:11:45 -07:00

threads.c

rds: make v3.1 as compat version

2019-02-04 14:59:11 -08:00

transport.c

rds: transport module should be auto loaded when transport is set

2020-06-25 16:26:25 -07:00