commit | b20e7bbfc7a15a4182730f0936433145992b4b06 | [log] [tgz] |
---|---|---|
author | Arnd Bergmann <arnd@arndb.de> | Mon Mar 21 18:18:00 2011 -0700 |
committer | David S. Miller <davem@davemloft.net> | Mon Mar 21 18:18:00 2011 -0700 |
tree | 81df1570eb7840b9ed5b981ad2e437b773448f5a | |
parent | 674f2115995b7b588cbf3540c9f9b2448a8c7ea8 [diff] |
net/appletalk: fix atalk_release use after free The BKL removal in appletalk introduced a use-after-free problem, where atalk_destroy_socket frees a sock, but we still release the socket lock on it. An easy fix is to take an extra reference on the sock and sock_put it when returning from atalk_release. Signed-off-by: Arnd Bergmann <arnd@arndb.de> Signed-off-by: David S. Miller <davem@davemloft.net>