This series, for various network subsystem components, replaces atomic_t reference counters with the new refcount_t type and API (see include/linux/refcount.h). By doing this we prevent intentional or accidental underflows or overflows that can led to use-after-free vulnerabilities. The patches are fully independent and can be cherry-picked separately. Since we convert all kernel subsystems in the same fashion, resulting in about 300 patches, we have to group them for sending at least in some fashion to be manageable. Please excuse the long cc list. If there are no objections to the patches, please merge them via respective trees. Elena Reshetova (18): net, llc: convert llc_sap.refcnt from atomic_t to refcount_t net, l2tp: convert l2tp_tunnel.ref_count from atomic_t to refcount_t net, l2tp: convert l2tp_session.ref_count from atomic_t to refcount_t net, vxlan: convert vxlan_sock.refcnt from atomic_t to refcount_t net, bluetooth: convert rfcomm_dlc.refcnt from atomic_t to refcount_t net, decnet: convert dn_fib_info.fib_clntref from atomic_t to refcount_t net, atm: convert atm_dev.refcnt from atomic_t to refcount_t net, atm: convert lec_arp_table.usage from atomic_t to refcount_t net, atm: convert in_cache_entry.use from atomic_t to refcount_t net, atm: convert eg_cache_entry.use from atomic_t to refcount_t net, bridge: convert net_bridge_vlan.refcnt from atomic_t to refcount_t net, calipso: convert calipso_doi.refcount from atomic_t to refcount_t net, sched: convert Qdisc.refcnt from atomic_t to refcount_t net, lapb: convert lapb_cb.refcnt from atomic_t to refcount_t net, ipx: convert ipx_interface.refcnt from atomic_t to refcount_t net, ipx: convert ipx_route.refcnt from atomic_t to refcount_t net, netrom: convert nr_neigh.refcount from atomic_t to refcount_t net, netrom: convert nr_node.refcount from atomic_t to refcount_t drivers/net/vxlan.c | 10 +++++----- include/linux/atmdev.h | 7 ++++--- include/net/bluetooth/rfcomm.h | 8 +++++--- include/net/calipso.h | 4 ++-- include/net/dn_fib.h | 5 +++-- include/net/ipx.h | 13 +++++++------ include/net/lapb.h | 3 ++- include/net/llc.h | 6 +++--- include/net/netrom.h | 13 +++++++------ include/net/sch_generic.h | 3 ++- include/net/vxlan.h | 2 +- net/atm/lec.c | 6 +++--- net/atm/lec_arpc.h | 2 +- net/atm/mpoa_caches.c | 26 +++++++++++++------------- net/atm/mpoa_caches.h | 5 +++-- net/atm/proc.c | 2 +- net/atm/resources.c | 2 +- net/bluetooth/rfcomm/core.c | 4 ++-- net/bridge/br_private.h | 3 ++- net/bridge/br_vlan.c | 8 ++++---- net/decnet/dn_fib.c | 6 +++--- net/ipv6/calipso.c | 12 ++++++------ net/ipx/af_ipx.c | 6 +++--- net/ipx/ipx_proc.c | 2 +- net/ipx/ipx_route.c | 2 +- net/l2tp/l2tp_core.c | 16 ++++++++-------- net/l2tp/l2tp_core.h | 13 +++++++------ net/l2tp/l2tp_debugfs.c | 5 ++--- net/l2tp/l2tp_ppp.c | 2 +- net/lapb/lapb_iface.c | 6 +++--- net/llc/llc_core.c | 2 +- net/netrom/nr_route.c | 6 +++--- net/sched/sch_api.c | 8 ++++---- net/sched/sch_generic.c | 8 ++++---- 34 files changed, 118 insertions(+), 108 deletions(-) -- 2.7.4