David Howells 06d9532fa6 rxrpc: Fix read-after-free in rxrpc_queue_local() ... rxrpc_queue_local() attempts to queue the local endpoint it is given and then, if successful, prints a trace line. The trace line includes the current usage count - but we're not allowed to look at the local endpoint at this point as we passed our ref on it to the workqueue. Fix this by reading the usage count before queuing the work item. Also fix the reading of local->debug_id for trace lines, which must be done with the same consideration as reading the usage count. Fixes: 09d2bf595d ("rxrpc: Add a tracepoint to track rxrpc_local refcounting") Reported-by: syzbot+78e71c5bab4f76a6a719@syzkaller.appspotmail.com Signed-off-by: David Howells <dhowells@redhat.com>		2019-08-14 11:37:51 +01:00
..
events	rxrpc: Fix read-after-free in rxrpc_queue_local()	2019-08-14 11:37:51 +01:00
bpf_probe.h	bpf: add writable context for raw tracepoints	2019-04-26 19:04:19 -07:00
define_trace.h	tracing: introduce TRACE_EVENT_NOP()	2019-04-08 09:22:51 -04:00
perf.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-11-04 09:26:51 +09:00
syscall.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
trace_events.h	tracing: Prevent further users of zero size static arrays in trace events	2018-05-29 08:29:13 -04:00