Guillaume Nault e91793bb61 l2tp: purge socket queues in the .destruct() callback ... The Rx path may grab the socket right before pppol2tp_release(), but nothing guarantees that it will enqueue packets before skb_queue_purge(). Therefore, the socket can be destroyed without its queues fully purged. Fix this by purging queues in pppol2tp_session_destruct() where we're guaranteed nothing is still referencing the socket. Fixes: 9e9cb6221a ("l2tp: fix userspace reception on plain L2TP sockets") Signed-off-by: Guillaume Nault <g.nault@alphalink.fr> Signed-off-by: David S. Miller <davem@davemloft.net>		2017-03-29 09:26:28 -07:00
..
Kconfig
l2tp_core.c	lib/vsprintf.c: remove %Z support	2017-02-27 18:43:47 -08:00
l2tp_core.h	l2tp: do not use udp_ioctl()	2017-02-10 15:57:34 -05:00
l2tp_debugfs.c
l2tp_eth.c	net: make ndo_get_stats64 a void function	2017-01-08 17:51:44 -05:00
l2tp_ip.c	l2tp: hold tunnel socket when handling control frames in l2tp_ip and l2tp_ip6	2017-03-29 09:26:28 -07:00
l2tp_ip6.c	l2tp: hold tunnel socket when handling control frames in l2tp_ip and l2tp_ip6	2017-03-29 09:26:28 -07:00
l2tp_netlink.c	net: l2tp: cleanup: remove redundant condition	2016-11-09 18:55:36 -05:00
l2tp_ppp.c	l2tp: purge socket queues in the .destruct() callback	2017-03-29 09:26:28 -07:00
Makefile