bpf: sockmap, synchronize_rcu before free'ing map
authorJohn Fastabend <john.fastabend@gmail.com>
Fri, 19 Jul 2019 17:29:20 +0000 (10:29 -0700)
committerDaniel Borkmann <daniel@iogearbox.net>
Mon, 22 Jul 2019 14:04:17 +0000 (16:04 +0200)
commit2bb90e5cc90e1d09f631aeab041a9cf913a5bbe5
tree2bd6fddc5a229ea3926fffc1fa4841a16f45ad9d
parent45a4521dcbd92e71c9e53031b40e34211d3b4feb
bpf: sockmap, synchronize_rcu before free'ing map

We need to have a synchronize_rcu before free'ing the sockmap because
any outstanding psock references will have a pointer to the map and
when they use this could trigger a use after free.

Fixes: 604326b41a6fb ("bpf, sockmap: convert to generic sk_msg interface")
Signed-off-by: John Fastabend <john.fastabend@gmail.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
net/core/sock_map.c