Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 23 Jul 2019 18:07:36 +0000 (UTC)
From:      Michael Tuexen <tuexen@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org
Subject:   svn commit: r350248 - head/sys/netinet
Message-ID:  <201907231807.x6NI7aP9006767@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: tuexen
Date: Tue Jul 23 18:07:36 2019
New Revision: 350248
URL: https://svnweb.freebsd.org/changeset/base/350248

Log:
  Fix a LOR in SCTP which was found by running syzkaller.
  
  Submitted by:		rrs@
  Reported by:		markj@
  MFC after:		1 week

Modified:
  head/sys/netinet/sctp_usrreq.c

Modified: head/sys/netinet/sctp_usrreq.c
==============================================================================
--- head/sys/netinet/sctp_usrreq.c	Tue Jul 23 17:48:37 2019	(r350247)
+++ head/sys/netinet/sctp_usrreq.c	Tue Jul 23 18:07:36 2019	(r350248)
@@ -965,9 +965,9 @@ sctp_shutdown(struct socket *so)
 		abort_anyway:
 				op_err = sctp_generate_cause(SCTP_CAUSE_USER_INITIATED_ABT, "");
 				stcb->sctp_ep->last_abort_code = SCTP_FROM_SCTP_USRREQ + SCTP_LOC_6;
+				SCTP_INP_RUNLOCK(inp);
 				sctp_abort_an_association(stcb->sctp_ep, stcb,
 				    op_err, SCTP_SO_LOCKED);
-				SCTP_INP_RUNLOCK(inp);
 				return (0);
 			}
 		}



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201907231807.x6NI7aP9006767>