Octavian Purdila 293ad60401 tcp: Fix for race due to temporary drop of the socket lock in skb_splice_bits. ... skb_splice_bits temporary drops the socket lock while iterating over the socket queue in order to break a reverse locking condition which happens with sendfile. This, however, opens a window of opportunity for tcp_collapse() to aggregate skbs and thus potentially free the current skb used in skb_splice_bits and tcp_read_sock. This patch fixes the problem by (re-)getting the same "logical skb" after the lock has been temporary dropped. Based on idea and initial patch from Evgeniy Polyakov. Signed-off-by: Octavian Purdila <opurdila@ixiacom.com> Acked-by: Evgeniy Polyakov <johnpol@2ka.mipt.ru> Signed-off-by: David S. Miller <davem@davemloft.net>		2008-06-04 15:45:58 -07:00
..
9p	9p: fix error path during early mount	2008-05-14 19:23:27 -05:00
802
8021q	vlan: Use bitmask of feature flags instead of seperate feature bits	2008-05-23 00:27:50 -07:00
appletalk
atm	Revert "atm: Do not free already unregistered net device."	2008-05-06 00:00:16 -07:00
ax25	ax25: Fix NULL pointer dereference and lockup.	2008-06-03 14:53:46 -07:00
bluetooth	bluetooth: rfcomm_dev_state_change deadlock fix	2008-06-03 14:27:17 -07:00
bridge	bridge: Consolidate error paths in br_add_bridge().	2008-05-04 17:58:07 -07:00
can	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6	2008-05-08 19:03:26 -07:00
core	tcp: Fix for race due to temporary drop of the socket lock in skb_splice_bits.	2008-06-04 15:45:58 -07:00
dccp	dccp ccid-3: Fix "t_ipi explosion" bug	2008-05-27 06:33:54 -07:00
decnet	ip: Use inline function dst_metric() instead of direct access to dst->metric[]	2008-05-04 22:14:42 -07:00
econet	net: Allow netdevices to specify needed head/tailroom	2008-05-12 20:48:31 -07:00
ethernet
ieee80211
ipv4	tcp: Fix for race due to temporary drop of the socket lock in skb_splice_bits.	2008-06-04 15:45:58 -07:00
ipv6	raw: Raw socket leak.	2008-06-04 15:16:12 -07:00
ipx
irda	irda: Sock leak on error path in irda_create.	2008-06-03 15:18:36 -07:00
iucv
key	af_key: Fix selector family initialization.	2008-05-21 13:26:11 -07:00
lapb
llc	llc: Fix double accounting of received packets	2008-05-30 02:57:29 -07:00
mac80211	mac80211: fix alignment issue with compare_ether_addr()	2008-05-28 16:43:50 -04:00
netfilter	netfilter: xt_connlimit: fix accouning when receive RST packet in ESTABLISHED state	2008-06-04 09:57:51 -07:00
netlabel	Audit: collect sessionid in netlink messages	2008-04-28 06:18:03 -04:00
netlink	netlink: Improve returned error codes	2008-06-03 16:36:54 -07:00
netrom
packet	net: Allow netdevices to specify needed head/tailroom	2008-05-12 20:48:31 -07:00
rfkill
rose	rose: Wrong list_lock argument in rose_node seqops	2008-05-02 17:03:22 -07:00
rxrpc	net: Add missing braces to multi-statement if()s	2008-05-02 16:20:10 -07:00
sched	netlink: Improve returned error codes	2008-06-03 16:36:54 -07:00
sctp	sctp: Fix ECN markings for IPv6	2008-06-04 12:40:15 -07:00
sunrpc	Merge branch 'for-2.6.26' of git://linux-nfs.org/~bfields/linux	2008-05-20 19:30:54 -07:00
tipc	tipc: Increase buffer header to support worst-case device	2008-05-08 21:38:24 -07:00
unix	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6	2008-04-24 08:40:34 -07:00
wanrouter
wireless	netlink: Improve returned error codes	2008-06-03 16:36:54 -07:00
x25
xfrm	xfrm: xfrm_algo: correct usage of RIPEMD-160	2008-06-04 12:04:55 -07:00
compat.c	net: Add compat support for getsockopt (MCAST_MSFILTER)	2008-04-29 03:23:22 -07:00
Kconfig
Makefile
nonet.c
socket.c	net: Unexport move_addr_to_{kernel,user}	2008-04-23 03:37:49 -07:00
sysctl_net.c	net: fix returning void-valued expression warnings	2008-05-01 02:47:38 -07:00
TUNABLE