linux/net/can
Lothar Waßmann f7e5cc0c40 net/can bugfix: use after free bug in can protocol drivers
Fix a use after free bug in can protocol drivers

The release functions of the can protocol drivers lack a call to
sock_orphan() which leads to referencing freed memory under certain
circumstances.

This patch fixes a bug reported here:
https://lists.berlios.de/pipermail/socketcan-users/2009-July/000985.html

Signed-off-by: Lothar Wassmann <LW@KARO-electronics.de>
Acked-by: Oliver Hartkopp <oliver@hartkopp.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2009-07-15 11:20:37 -07:00
..
af_can.c can: af_can.c use rcu_barrier() on module unload. 2009-06-10 01:11:24 -07:00
af_can.h [CAN]: Add PF_CAN core module 2008-01-28 14:54:10 -08:00
bcm.c net/can bugfix: use after free bug in can protocol drivers 2009-07-15 11:20:37 -07:00
Kconfig [CAN]: Add virtual CAN netdevice driver 2008-01-28 14:54:12 -08:00
Makefile [CAN]: Add broadcast manager (bcm) protocol 2008-01-28 14:54:11 -08:00
proc.c proc 2/2: remove struct proc_dir_entry::owner 2009-03-31 01:14:44 +04:00
raw.c net/can bugfix: use after free bug in can protocol drivers 2009-07-15 11:20:37 -07:00