nikolay@redhat.com cefbc05835 bonding: fix race condition in bonding_store_slaves_active ...

[ Upstream commit e196c0e579 ]

Race between bonding_store_slaves_active() and slave manipulation
 functions. The bond_for_each_slave use in bonding_store_slaves_active()
 is not protected by any synchronization mechanism.
 NULL pointer dereference is easy to reach.
 Fixed by acquiring the bond->lock for the slave walk.

 v2: Make description text < 75 columns

Signed-off-by: Nikolay Aleksandrov <nikolay@redhat.com>
Signed-off-by: Jay Vosburgh <fubar@us.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2013-01-11 09:03:35 -08:00

..

bond_3ad.c

net: bonding: factor out rlock(bond->lock) in xmit path

2011-05-09 12:05:59 -07:00

bond_3ad.h

Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6

2011-05-17 17:33:11 -04:00

bond_alb.c

bonding: fix enslaving in alb mode when link down

2012-02-03 09:19:03 -08:00

bond_alb.h

bonding: move processing of recv handlers into handle_frame()

2011-04-25 12:00:30 -07:00

bond_debugfs.c

bonding: add the debugfs interface to see RLB hash table

2010-12-16 13:16:05 -08:00

bond_ipv6.c

bonding/vlan: Fix mangled NAs on slaves without VLAN tag insertion

2010-12-16 12:43:22 -08:00

bond_main.c

bonding: Bonding driver does not consider the gso_max_size/gso_max_segs setting of slave devices.

2013-01-11 09:03:34 -08:00

bond_procfs.c

net-bonding: Fix minor sparse complaints

2011-04-14 22:00:31 -07:00

bond_sysfs.c

bonding: fix race condition in bonding_store_slaves_active

2013-01-11 09:03:35 -08:00

bonding.h

net: drivers: kill two unused macro definitions

2011-05-15 18:01:15 -04:00

Makefile

bonding, ipv4, ipv6, vlan: Handle NETDEV_BONDING_FAILOVER like NETDEV_NOTIFY_PEERS

2011-04-17 23:36:03 -07:00