Jon Maloy e0e853ac03 tipc: fix access of released memory ... When the function tipc_group_filter_msg() finds that a member event indicates that the member is leaving the group, it first deletes the member instance, and then purges the message queue being handled by the call. But the message queue is an aggregated field in the just deleted item, leading the purge call to access freed memory. We fix this by swapping the order of the two actions. Signed-off-by: Jon Maloy <jon.maloy@ericsson.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2017-11-21 20:22:03 +09:00
..
addr.c
addr.h
bcast.c
bcast.h
bearer.c
bearer.h
core.c
core.h
discover.c
discover.h
eth_media.c
group.c	tipc: fix access of released memory	2017-11-21 20:22:03 +09:00
group.h
ib_media.c
Kconfig
link.c	tipc: improve link resiliency when rps is activated	2017-11-11 15:36:05 +09:00
link.h
Makefile
monitor.c
monitor.h
msg.c	tipc: enforce valid ratio between skb truesize and contents	2017-11-16 10:49:00 +09:00
msg.h	tipc: enforce valid ratio between skb truesize and contents	2017-11-16 10:49:00 +09:00
name_distr.c
name_distr.h
name_table.c
name_table.h
net.c
net.h
netlink_compat.c
netlink.c
netlink.h
node.c	tipc: enforce valid ratio between skb truesize and contents	2017-11-16 10:49:00 +09:00
node.h
server.c
server.h
socket.c
socket.h
subscr.c
subscr.h
sysctl.c
udp_media.c
udp_media.h