Merge branch 'l2tp-fix-some-races-in-session-deletion'
authorDavid S. Miller <davem@davemloft.net>
Mon, 25 Sep 2017 21:44:41 +0000 (14:44 -0700)
committerDavid S. Miller <davem@davemloft.net>
Mon, 25 Sep 2017 21:44:41 +0000 (14:44 -0700)
commit016576d531c1923f604a0f8410312c39e25b26a1
treebff46ce62caf374bf2bf49e8f8a8110696c2a6d2
parent5c346525d3591cb032eca86d0f904cc01f1069ff
parentb228a94066406b6c456321d69643b0d7ce11cfa6
Merge branch 'l2tp-fix-some-races-in-session-deletion'

Guillaume Nault says:

====================
l2tp: fix some races in session deletion

L2TP provides several interfaces for deleting sessions. Using two of
them concurrently can lead to use-after-free bugs.

Patch #2 uses a flag to prevent double removal of L2TP sessions.
Patch #1 fixes a bug found in the way. Fixing this bug is also
necessary for patch #2 to handle all cases.

This issue is similar to the tunnel deletion bug being worked on by
Sabrina: https://patchwork.ozlabs.org/patch/814173/
====================

Signed-off-by: David S. Miller <davem@davemloft.net>