Commit 09316255 authored Apr 24, 2013 by Eric Dumazet Committed by David S. Miller Apr 25, 2013

tcp: force a dst refcount when prequeue packet



Before escaping RCU protected section and adding packet into
prequeue, make sure the dst is refcounted.

Reported-by: Mike Galbraith <bitbucket@online.de>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent d2cb6ce7

include/net/tcp.h

+1 −0

Original line number	Diff line number	Diff line
		@@ -1049,6 +1049,7 @@ static inline bool tcp_prequeue(struct sock sk, struct sk_buff skb)
		skb_queue_len(&tp->ucopy.prequeue) == 0)
		return false;

		skb_dst_force(skb);
		__skb_queue_tail(&tp->ucopy.prequeue, skb);
		tp->ucopy.memory += skb->truesize;
		if (tp->ucopy.memory > sk->sk_rcvbuf) {