Phonet: hold socket before giving it to sk_deliver_skb()
Signed-off-by: Rémi Denis-Courmont <remi.denis-courmont@nokia.com>
Acked-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
diff --git a/net/phonet/socket.c b/net/phonet/socket.c
index 8c84190..0412beb 100644
--- a/net/phonet/socket.c
+++ b/net/phonet/socket.c
@@ -112,8 +112,10 @@
continue;
clone = skb_clone(skb, GFP_ATOMIC);
- if (clone)
+ if (clone) {
+ sock_hold(sknode);
sk_receive_skb(sknode, clone, 0);
+ }
}
spin_unlock(&pnsocks.lock);
}