Re: [PATCH net] rxrpc: Fix race between recvmsg and sendmsg on immediate call failure

2020-07-30 Thread David Miller
From: David Howells Date: Wed, 29 Jul 2020 00:03:56 +0100 > There's a race between rxrpc_sendmsg setting up a call, but then failing to > send anything on it due to an error, and recvmsg() seeing the call > completion occur and trying to return the state to the user. > > An assertion fails in rx

[PATCH net] rxrpc: Fix race between recvmsg and sendmsg on immediate call failure

2020-07-28 Thread David Howells
There's a race between rxrpc_sendmsg setting up a call, but then failing to send anything on it due to an error, and recvmsg() seeing the call completion occur and trying to return the state to the user. An assertion fails in rxrpc_recvmsg() because the call has already been released from the sock