| commit | d99927f4d93f36553699573b279e0ff98ad7dea6 | [log] [tgz] |
|---|---|---|
| author | Eric Dumazet <eric.dumazet@gmail.com> | Thu Sep 24 10:49:24 2009 +0000 |
| committer | David S. Miller <davem@davemloft.net> | Wed Sep 30 16:20:38 2009 -0700 |
| tree | 28481ae5aebac58c5fe29e0f08eddff4e80289f6 | |
| parent | b7058842c940ad2c08dd829b21e5c92ebe3b8758 [diff] |
net: Fix sock_wfree() race Commit 2b85a34e911bf483c27cfdd124aeb1605145dc80 (net: No more expensive sock_hold()/sock_put() on each tx) opens a window in sock_wfree() where another cpu might free the socket we are working on. A fix is to call sk->sk_write_space(sk) while still holding a reference on sk. Reported-by: Jike Song <albcamus@gmail.com> Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>