diff options
| author | Jeremy Kerr <[email protected]> | 2022-02-11 09:15:52 +0800 |
|---|---|---|
| committer | Jakub Kicinski <[email protected]> | 2022-02-11 14:39:54 -0800 |
| commit | 6c342ce2239c182c2428ce5a44cb32330434ae6e (patch) | |
| tree | ba24ff1aeea08f1731aab6139296938904c6386a /lib/test_overflow.c | |
| parent | 6bb9681a43f34f2cab4aad6e2a02da4ce54d13c5 (diff) | |
mctp: serial: Cancel pending work from ndo_uninit handler
We cannot do the cancel_work_sync from after the unregister_netdev, as
the dev pointer is no longer valid, causing a uaf on ldisc unregister
(or device close).
Instead, do the cancel_work_sync from the ndo_uninit op, where the dev
still exists, but the queue has stopped.
Fixes: 7bd9890f3d74 ("mctp: serial: cancel tx work on ldisc close")
Reported-by: Luo Likang <[email protected]>
Tested-by: Luo Likang <[email protected]>
Signed-off-by: Jeremy Kerr <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Jakub Kicinski <[email protected]>
Diffstat (limited to 'lib/test_overflow.c')
0 files changed, 0 insertions, 0 deletions