• Oleksij Rempel's avatar
    can: j1939: j1939_can_recv(): add priv refcounting · ddeeb7d4
    Oleksij Rempel authored
    j1939_can_recv() can be called in parallel with socket release. In this
    case sk_release and sk_destruct can be done earlier than
    j1939_can_recv() is processed.
    
    Reported-by: syzbot+ca172a0ac477ac90f045@syzkaller.appspotmail.com
    Reported-by: syzbot+07ca5bce8530070a5650@syzkaller.appspotmail.com
    Reported-by: syzbot+a47537d3964ef6c874e1@syzkaller.appspotmail.com
    Fixes: 9d71dd0c ("can: add support of SAE J1939 protocol")
    Signed-off-by: default avatarOleksij Rempel <o.rempel@pengutronix.de>
    ddeeb7d4
main.c 9.13 KB