diff options
| author | Sven Eckelmann <sven@narfation.org> | 2016-08-06 15:50:52 +0200 |
|---|---|---|
| committer | Simon Wunderlich <sw@simonwunderlich.de> | 2016-08-26 15:22:30 +0200 |
| commit | 936523441bb64cdc9a5b263e8fd2782e70313a57 (patch) | |
| tree | dcc21b6097509844be06b692a15f6c3f0128497f /drivers/android | |
| parent | 1fe323aa1b2390a0c57fb0b06a782f128d49094c (diff) | |
| download | kernel_i9300_mainline-936523441bb64cdc9a5b263e8fd2782e70313a57.zip kernel_i9300_mainline-936523441bb64cdc9a5b263e8fd2782e70313a57.tar.gz kernel_i9300_mainline-936523441bb64cdc9a5b263e8fd2782e70313a57.tar.bz2 | |
batman-adv: Add missing refcnt for last_candidate
batadv_find_router dereferences last_bonding_candidate from
orig_node without making sure that it has a valid reference. This reference
has to be retrieved by increasing the reference counter while holding
neigh_list_lock. The lock is required to avoid that
batadv_last_bonding_replace removes the current last_bonding_candidate,
reduces the reference counter and maybe destroys the object in this
process.
Fixes: f3b3d9018975 ("batman-adv: add bonding again")
Signed-off-by: Sven Eckelmann <sven@narfation.org>
Signed-off-by: Marek Lindner <mareklindner@neomailbox.ch>
Signed-off-by: Simon Wunderlich <sw@simonwunderlich.de>
Diffstat (limited to 'drivers/android')
0 files changed, 0 insertions, 0 deletions