From: Mike Maloney
Date: Tue, 28 Nov 2017 10:44:29 -0500
> From: Mike Maloney
>
> syzkaller found a race condition fanout_demux_rollover() while removing
> a packet socket from a fanout group.
>
> po->rollover is read and operated on during packet_rcv_fanout(), via
> fanout_demux_rollover(), b
On Tue, 2017-11-28 at 10:44 -0500, Mike Maloney wrote:
> From: Mike Maloney
>
> syzkaller found a race condition fanout_demux_rollover() while
> removing
> a packet socket from a fanout group.
Reviewed-by: Eric Dumazet
Thanks !
From: Mike Maloney
syzkaller found a race condition fanout_demux_rollover() while removing
a packet socket from a fanout group.
po->rollover is read and operated on during packet_rcv_fanout(), via
fanout_demux_rollover(), but the pointer is currently cleared before the
synchronization in packet_
