Re: [PATCH net] dccp/tcp: fix routing redirect race
From: Eric Dumazet
Date: Wed Mar 08 2017 - 21:36:13 EST
On Thu, 2017-03-09 at 12:15 +1100, Jon Maxwell wrote:
> We have seen a few incidents lately where a dst_enty has been freed
> with a dangling TCP socket reference (sk->sk_dst_cache) pointing to that
> dst_entry. If the conditions/timings are right a crash then ensues when the
> freed dst_entry is referenced later on. A Common crashing back trace is:
Very nice catch !
Don't we have a similar issue for IPv6 ?