Racy addr->valid in sctp_inet6addr_event() and sctp_copy_laddrs()

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

We observed a data race over addr->valid between sctp_inet6addr_event() and 
sctp_copy_laddrs(). Under the following execution order, sctp_copy_laddrs()
might copy the addr that is no longer valid.

sctp_copy_laddrs()              sctp_inet6addr_event()
if (!addr->valid)
        continue;
                                		addr->valid = 0;
memcpy(&temp, &addr->a, sizeof(temp));

Thanks



[Index of Archives]     [Linux Networking Development]     [Linux OMAP]     [Linux USB Devel]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     SCTP

  Powered by Linux