Re: [PATCH v4 1/3] net: unix: fix use-after-free in unix_dgram_poll()

2015-10-13 Thread Hannes Frederic Sowa
Hello, On Mon, Oct 12, 2015, at 21:41, Jason Baron wrote: > On 10/09/2015 10:38 AM, Hannes Frederic Sowa wrote: > > Hi, > > > > Jason Baron writes: > > > >> The unix_dgram_poll() routine calls sock_poll_wait() not only for the wait > >> queue associated with the socket s that we are poll'ing ag

Re: [PATCH v4 1/3] net: unix: fix use-after-free in unix_dgram_poll()

2015-10-12 Thread Jason Baron
On 10/09/2015 10:38 AM, Hannes Frederic Sowa wrote: > Hi, > > Jason Baron writes: > >> The unix_dgram_poll() routine calls sock_poll_wait() not only for the wait >> queue associated with the socket s that we are poll'ing against, but also >> calls >> sock_poll_wait() for a remote peer socket p,

Re: [PATCH v4 1/3] net: unix: fix use-after-free in unix_dgram_poll()

2015-10-11 Thread Rainer Weikusat
Hannes Frederic Sowa writes: > Jason Baron writes: > >> The unix_dgram_poll() routine calls sock_poll_wait() not only for the wait >> queue associated with the socket s that we are poll'ing against, but also >> calls >> sock_poll_wait() for a remote peer socket p, if it is connected. Thus, >> if

Re: [PATCH v4 1/3] net: unix: fix use-after-free in unix_dgram_poll()

2015-10-09 Thread Hannes Frederic Sowa
Hi, Jason Baron writes: > The unix_dgram_poll() routine calls sock_poll_wait() not only for the wait > queue associated with the socket s that we are poll'ing against, but also > calls > sock_poll_wait() for a remote peer socket p, if it is connected. Thus, > if we call poll()/select()/epoll()

[PATCH v4 1/3] net: unix: fix use-after-free in unix_dgram_poll()

2015-10-08 Thread Jason Baron
The unix_dgram_poll() routine calls sock_poll_wait() not only for the wait queue associated with the socket s that we are poll'ing against, but also calls sock_poll_wait() for a remote peer socket p, if it is connected. Thus, if we call poll()/select()/epoll() for the socket s, there are then a cou