net/tls: swap sk_write_space on close
Now that we swap the original proto and clear the ULP pointer on close we have to make sure no callback will try to access the freed state. sk_write_space is not part of sk_prot, remember to swap it. Reported-by:<syzbot+dcdc9deefaec44785f32@syzkaller.appspotmail.com> Fixes: 95fa1454 ("bpf: sockmap/tls, close can race with map free") Signed-off-by:
Jakub Kicinski <jakub.kicinski@netronome.com> Signed-off-by:
David S. Miller <davem@davemloft.net>
parent
6d0d779d
Please register or sign in to comment