| commit | 06a15f51cf3618e32a73871ee6a547ef7fd902b5 | [log] [tgz] |
|---|---|---|
| author | Alexander Couzens <lynxis@fe80.eu> | Mon Sep 28 11:32:42 2015 +0200 |
| committer | David S. Miller <davem@davemloft.net> | Mon Sep 28 22:39:10 2015 -0700 |
| tree | 5d7f25db11b5b985c7366d8bf954aeca976f2b2b | |
| parent | 661dfc65f7981481ba2e31aaa702371e82336e56 [diff] |
l2tp: protect tunnel->del_work by ref_count There is a small chance that tunnel_free() is called before tunnel->del_work scheduled resulting in a zero pointer dereference. Signed-off-by: Alexander Couzens <lynxis@fe80.eu> Acked-by: James Chapman <jchapman@katalix.com> Signed-off-by: David S. Miller <davem@davemloft.net>