From: Eric Dumazet <eduma...@google.com> Date: Tue, 22 Jan 2019 10:40:59 -0800
> syzbot found that ax25 routes where not properly protected > against concurrent use [1]. > > In this particular report the bug happened while > copying ax25->digipeat. > > Fix this problem by making sure we call ax25_get_route() > while ax25_route_lock is held, so that no modification > could happen while using the route. > > The current two ax25_get_route() callers do not sleep, > so this change should be fine. > > Once we do that, ax25_get_route() no longer needs to > grab a reference on the found route. > > [1] ... > Signed-off-by: Eric Dumazet <eduma...@google.com> > Cc: Ralf Baechle <r...@linux-mips.org> > Reported-by: syzbot <syzkal...@googlegroups.com> Applied.
