]> xenbits.xensource.com Git - arm/linux.git/commit
crypto: af_alg - Use bh_lock_sock in sk_destruct
authorHerbert Xu <herbert@gondor.apana.org.au>
Thu, 5 Dec 2019 05:45:05 +0000 (13:45 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 1 Feb 2020 09:34:52 +0000 (09:34 +0000)
commit9d9b578ffef37278d8c37492c6a0fe75e1f6bab8
tree6b6109d1a0757107259e6d2bfa81bf5fad79795d
parentac39443b7b497f79891b16edb0f468ba35d36aee
crypto: af_alg - Use bh_lock_sock in sk_destruct

commit 37f96694cf73ba116993a9d2d99ad6a75fa7fdb0 upstream.

As af_alg_release_parent may be called from BH context (most notably
due to an async request that only completes after socket closure,
or as reported here because of an RCU-delayed sk_destruct call), we
must use bh_lock_sock instead of lock_sock.

Reported-by: syzbot+c2f1558d49e25cc36e5e@syzkaller.appspotmail.com
Reported-by: Eric Dumazet <eric.dumazet@gmail.com>
Fixes: c840ac6af3f8 ("crypto: af_alg - Disallow bind/setkey/...")
Cc: <stable@vger.kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
crypto/af_alg.c