net, ipv6: convert xfrm6_tunnel_spi.refcnt from atomic_t to refcount_t
authorReshetova, Elena <elena.reshetova@intel.com>
Tue, 4 Jul 2017 06:34:59 +0000 (09:34 +0300)
committerDavid S. Miller <davem@davemloft.net>
Tue, 4 Jul 2017 08:29:04 +0000 (01:29 -0700)
commitd12f3827e04b58f617c43f4d44ad3ad788d852b7
treea001e2e73cb27476e2998a95dc0200f3443ba1ba
parentaffa78bc6a204fac1b5ced4f34376f53c70ec0ac
net, ipv6: convert xfrm6_tunnel_spi.refcnt from atomic_t to refcount_t

refcount_t type and corresponding API should be
used instead of atomic_t when the variable is used as
a reference counter. This allows to avoid accidental
refcounter overflows that might lead to use-after-free
situations.

Signed-off-by: Elena Reshetova <elena.reshetova@intel.com>
Signed-off-by: Hans Liljestrand <ishkamiel@gmail.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: David Windsor <dwindsor@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/xfrm6_tunnel.c