tree 244f0f413f4713fedf4524f51cb04b1c071af69d
parent d9face6fc62a73059f0fc3a3de4dfe8f53536aa7
author Guillaume Nault <g.nault@alphalink.fr> 1490958149 +0200
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1499258418 +0200

l2tp: hold session while sending creation notifications

commit 5e6a9e5a3554a5b3db09cdc22253af1849c65dff upstream.

l2tp_session_find() doesn't take any reference on the returned session.
Therefore, the session may disappear while sending the notification.

Use l2tp_session_get() instead and decrement session's refcount once
the notification is sent.

Fixes: 33f72e6f0c67 ("l2tp : multicast notification to the registered listeners")
Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>