Maxim Mikityanskiy ad6d6ae4a3 net/tls: Remove the context from the list in tls_device_down ... commit f6336724a4 upstream. tls_device_down takes a reference on all contexts it's going to move to the degraded state (software fallback). If sk_destruct runs afterwards, it can reduce the reference counter back to 1 and return early without destroying the context. Then tls_device_down will release the reference it took and call tls_device_free_ctx. However, the context will still stay in tls_device_down_list forever. The list will contain an item, memory for which is released, making a memory corruption possible. Fix the above bug by properly removing the context from all lists before any call to tls_device_free_ctx. Fixes: 3740651bf7 ("tls: Fix context leak on tls_device_down") Signed-off-by: Maxim Mikityanskiy <maximmi@nvidia.com> Reviewed-by: Tariq Toukan <tariqt@nvidia.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-08-03 12:03:47 +02:00
..
Kconfig	…
Makefile	…
tls_device.c	net/tls: Remove the context from the list in tls_device_down	2022-08-03 12:03:47 +02:00
tls_device_fallback.c	net/tls: Fix use-after-free after the TLS device goes down and up	2021-06-01 15:58:05 -07:00
tls_main.c	net/tls: Check for errors in tls_device_init	2022-07-21 21:24:31 +02:00
tls_proc.c	…
tls_sw.c	net/tls: fix slab-out-of-bounds bug in decrypt_internal	2022-04-13 20:59:15 +02:00
tls_toe.c	…
trace.c	…
trace.h	…