Commit cb5da847 authored Nov 01, 2016 by Parthasarathy Bhuvaragan Committed by David S. Miller Nov 01, 2016

tipc: set kern=0 in sk_alloc() during tipc_accept()



Until now, tipc_accept() calls sk_alloc() with kern=1. This is
incorrect as the data socket's owner is the user application.
Thus for these accepted data sockets the network namespace
refcount is skipped.

In this commit, we fix this by setting kern=0.

Acked-by: Ying Xue <ying.xue@windriver.com>
Acked-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: Parthasarathy Bhuvaragan <parthasarathy.bhuvaragan@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent 4891d8fe

net/tipc/socket.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -2093,7 +2093,7 @@ static int tipc_accept(struct socket sock, struct socket new_sock, int flags)

		buf = skb_peek(&sk->sk_receive_queue);

		res = tipc_sk_create(sock_net(sock->sk), new_sock, 0, 1);
		res = tipc_sk_create(sock_net(sock->sk), new_sock, 0, 0);
		if (res)
		goto exit;
		security_sk_clone(sock->sk, new_sock->sk);