From: Ka-Cheong Poon <[email protected]> Date: Wed, 11 Sep 2019 02:58:05 -0700
> In rds_bind(), an rds_sock is added to the RDS bind hash table before > rs_transport is set. This means that the socket can be found by the > receive code path when rs_transport is NULL. And the receive code > path de-references rs_transport for congestion update check. This can > cause a panic. An rds_sock should not be added to the bind hash table > before all the needed fields are set. > > Reported-by: [email protected] > Signed-off-by: Ka-Cheong Poon <[email protected]> Applied.
