Cong Wang 03c0535554 NFC: Close a race condition in llcp_sock_getname()
llcp_sock_getname() checks llcp_sock->dev to make sure
llcp_sock is already connected or bound, however, we could
be in the middle of llcp_sock_bind() where llcp_sock->dev
is bound and llcp_sock->service_name_len is set,
but llcp_sock->service_name is not, in this case we would
lead to copy some bytes from a NULL pointer.

Just lock the sock since this is not a hot path anyway.

Reported-by: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
2016-02-25 08:41:01 +01:00
..
2015-11-30 14:47:33 -05:00
2015-10-13 17:42:34 +02:00
2016-01-21 19:36:09 +01:00
2016-01-07 14:31:26 -05:00
2015-11-23 14:56:15 -05:00
2015-10-23 03:05:19 -07:00
2015-10-07 04:27:43 -07:00
2016-02-11 09:45:24 -05:00
2016-02-07 14:06:26 -05:00
2016-01-10 22:13:15 -05:00