Re: [PATCH] l2tp: protect tunnel->del_work by ref_count

2015-09-28 Thread David Miller
From: Alexander Couzens Date: Mon, 28 Sep 2015 11:32:42 +0200 > There is a small chance that tunnel_free() is called before tunnel->del_work > scheduled > resulting in a zero pointer dereference. > > Signed-off-by: Alexander Couzens Applied and queued up for -stable, thanks. -- To unsubscribe

Re: [PATCH] l2tp: protect tunnel->del_work by ref_count

2015-09-28 Thread James Chapman
Acked-by: James Chapman On 28 September 2015 at 10:32, Alexander Couzens wrote: > There is a small chance that tunnel_free() is called before tunnel->del_work > scheduled > resulting in a zero pointer dereference. > > Signed-off-by: Alexander Couzens > --- > net/l2tp/l2tp_core.c | 11 +++

[PATCH] l2tp: protect tunnel->del_work by ref_count

2015-09-28 Thread Alexander Couzens
There is a small chance that tunnel_free() is called before tunnel->del_work scheduled resulting in a zero pointer dereference. Signed-off-by: Alexander Couzens --- net/l2tp/l2tp_core.c | 11 +-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/net/l2tp/l2tp_core.c b/net/l2