diff options
author | Eric Dumazet <edumazet@google.com> | 2013-04-24 18:34:55 -0700 |
---|---|---|
committer | Ben Hutchings <ben@decadent.org.uk> | 2013-05-30 14:35:11 +0100 |
commit | 36fced6bf3ea54b198963cac4338d218f3ad0942 (patch) | |
tree | 1322dee6a8d7fb49b5227644a471c792b3ccfaea | |
parent | 2a068400fcef7b1563d60f294b584b728236307f (diff) | |
download | lwn-36fced6bf3ea54b198963cac4338d218f3ad0942.tar.gz lwn-36fced6bf3ea54b198963cac4338d218f3ad0942.zip |
tcp: force a dst refcount when prequeue packet
[ Upstream commit 093162553c33e9479283e107b4431378271c735d ]
Before escaping RCU protected section and adding packet into
prequeue, make sure the dst is refcounted.
Reported-by: Mike Galbraith <bitbucket@online.de>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
-rw-r--r-- | include/net/tcp.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/net/tcp.h b/include/net/tcp.h index 0768715ee4dd..fe4601960344 100644 --- a/include/net/tcp.h +++ b/include/net/tcp.h @@ -931,6 +931,7 @@ static inline int tcp_prequeue(struct sock *sk, struct sk_buff *skb) if (sysctl_tcp_low_latency || !tp->ucopy.task) return 0; + skb_dst_force(skb); __skb_queue_tail(&tp->ucopy.prequeue, skb); tp->ucopy.memory += skb->truesize; if (tp->ucopy.memory > sk->sk_rcvbuf) { |