Re: [net] tipc: fix NULL pointer dereference in tipc_disc_rcv()

2020-06-11 Thread David Miller
From: Tuong Lien Date: Thu, 11 Jun 2020 17:08:08 +0700 > When a bearer is enabled, we create a 'tipc_discoverer' object to store > the bearer related data along with a timer and a preformatted discovery > message buffer for later probing... However, this is only carried after > the bearer was set

[net] tipc: fix NULL pointer dereference in tipc_disc_rcv()

2020-06-11 Thread Tuong Lien
When a bearer is enabled, we create a 'tipc_discoverer' object to store the bearer related data along with a timer and a preformatted discovery message buffer for later probing... However, this is only carried after the bearer was set 'up', that left a race condition resulting in kernel panic. It