Eric Dumazet c2f34a65a6 tcp/dccp: fix potential NULL deref in __inet_inherit_port()
As we no longer hold listener lock in fast path, it is possible that a
child is created right after listener freed its bound port, if a close()
is done while incoming packets are processed.

__inet_inherit_port() must detect this and return an error,
so that caller can free the child earlier.

Fixes: e994b2f0fb92 ("tcp: do not lock listener to process SYN packets")
Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash table")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-10-14 19:06:31 -07:00
..
2015-08-25 13:38:50 -07:00
2015-05-28 11:23:20 +08:00
2015-08-29 13:07:54 -07:00
2013-12-29 16:34:25 -05:00
2015-10-08 04:27:03 -07:00
2015-07-09 21:09:10 -07:00
2015-07-09 14:22:52 -07:00
2015-07-09 14:22:52 -07:00
2014-09-01 18:12:45 -07:00
2015-07-09 14:22:52 -07:00
2015-07-09 14:22:52 -07:00
2015-01-28 22:18:37 -08:00
2012-03-11 23:42:51 -07:00
2014-05-23 16:28:53 -04:00
2015-09-17 17:18:37 -07:00
2015-10-08 04:27:03 -07:00
2013-05-31 17:19:05 -07:00