android_kernel_google_msm/net/l2tp
Tom Parkin 988aaa6d34 l2tp: fix oops in l2tp_eth_create() error path
[ Upstream commit 789336360e ]

When creating an L2TPv3 Ethernet session, if register_netdev() should fail for
any reason (for example, automatic naming for "l2tpeth%d" interfaces hits the
32k-interface limit), the netdev is freed in the error path.  However, the
l2tp_eth_sess structure's dev pointer is left uncleared, and this results in
l2tp_eth_delete() then attempting to unregister the same netdev later in the
session teardown.  This results in an oops.

To avoid this, clear the session dev pointer in the error path.

Signed-off-by: Tom Parkin <tparkin@katalix.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2012-11-17 13:16:18 -08:00
..
Kconfig
l2tp_core.c l2tp: avoid to use synchronize_rcu in tunnel free function 2012-10-02 10:29:42 -07:00
l2tp_core.h l2tp: avoid to use synchronize_rcu in tunnel free function 2012-10-02 10:29:42 -07:00
l2tp_debugfs.c fix return values of l2tp_dfs_seq_open() 2011-06-05 14:11:09 -07:00
l2tp_eth.c l2tp: fix oops in l2tp_eth_create() error path 2012-11-17 13:16:18 -08:00
l2tp_ip.c l2tp: fix a race in l2tp_ip_sendmsg() 2012-07-16 09:03:45 -07:00
l2tp_netlink.c
l2tp_ppp.c l2tp: enable automatic module loading for l2tp_ppp 2012-03-21 22:14:56 -04:00
Makefile