Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 6ee02a54 authored by Su Yanjun's avatar Su Yanjun Committed by Steffen Klassert
Browse files

xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module 



When unloading xfrm6_tunnel module, xfrm6_tunnel_fini directly
frees the xfrm6_tunnel_spi_kmem. Maybe someone has gotten the
xfrm6_tunnel_spi, so need to wait it.

Fixes: 91cc3bb0("xfrm6_tunnel: RCU conversion")
Signed-off-by: default avatarSu Yanjun <suyj.fnst@cn.fujitsu.com>
Acked-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
parent f10e0010

net/ipv6/xfrm6_tunnel.c

+4 −0
Original line number Diff line number Diff line
@@ -402,6 +402,10 @@ static void __exit xfrm6_tunnel_fini(void) 
	xfrm6_tunnel_deregister(&xfrm6_tunnel_handler, AF_INET6);

	xfrm_unregister_type(&xfrm6_tunnel_type, AF_INET6);

	unregister_pernet_subsys(&xfrm6_tunnel_net_ops);

	/* Someone maybe has gotten the xfrm6_tunnel_spi.

	 * So need to wait it.

	 */

	rcu_barrier();

	kmem_cache_destroy(xfrm6_tunnel_spi_kmem);

}