Marcelo Ricardo Leitner a4226c7ebf sctp: avoid BUG_ON on sctp_wait_for_sndbuf ...

[ Upstream commit 2dcab59848 ]

Alexander Popov reported that an application may trigger a BUG_ON in
sctp_wait_for_sndbuf if the socket tx buffer is full, a thread is
waiting on it to queue more data and meanwhile another thread peels off
the association being used by the first thread.

This patch replaces the BUG_ON call with a proper error handling. It
will return -EPIPE to the original sendmsg call, similarly to what would
have been done if the association wasn't found in the first place.

Acked-by: Alexander Popov <alex.popov@linux.com>
Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Reviewed-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-02-18 16:39:27 +01:00

..

associola.c

…

auth.c

sctp: translate host order to network order when setting a hmacid

2015-11-15 18:27:27 -05:00

bind_addr.c

…

chunk.c

…

debug.c

…

endpointola.c

…

input.c

…

inqueue.c

…

ipv6.c

sctp: lack the check for ports in sctp_v6_cmp_addr

2016-04-20 15:41:58 +09:00

Kconfig

…

Makefile

…

objcnt.c

…

output.c

…

outqueue.c

sctp: start t5 timer only when peer rwnd is 0 and local state is SHUTDOWN_PENDING

2015-12-06 22:31:51 -05:00

primitive.c

…

probe.c

…

proc.c

…

protocol.c

sctp: Fix port hash table size computation

2016-03-03 15:07:07 -08:00

sm_make_chunk.c

sctp: use the same clock as if sock source timestamps were on

2015-12-05 22:23:22 -05:00

sm_sideeffect.c

…

sm_statefuns.c

sctp: validate chunk len before actually using it

2016-11-15 07:46:39 +01:00

sm_statetable.c

…

socket.c

sctp: avoid BUG_ON on sctp_wait_for_sndbuf

2017-02-18 16:39:27 +01:00

ssnmap.c

…

sysctl.c

net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory

2016-01-31 11:28:59 -08:00

transport.c

remove abs64()

2015-11-09 15:11:24 -08:00

tsnmap.c

…

ulpevent.c

…

ulpqueue.c

…