net: convert sock.sk_wmem_alloc from atomic_t to refcount_t
refcount_t type and corresponding API should be used instead of atomic_t when the variable is used as a reference counter. This allows to avoid accidental refcounter overflows that might lead to use-after-free situations. Signed-off-by:Elena Reshetova <elena.reshetova@intel.com> Signed-off-by:
Hans Liljestrand <ishkamiel@gmail.com> Signed-off-by:
Kees Cook <keescook@chromium.org> Signed-off-by:
David Windsor <dwindsor@gmail.com> Signed-off-by:
David S. Miller <davem@davemloft.net>
Showing
- drivers/atm/fore200e.c 1 addition, 11 deletionsdrivers/atm/fore200e.c
- drivers/atm/he.c 1 addition, 1 deletiondrivers/atm/he.c
- drivers/atm/idt77252.c 2 additions, 2 deletionsdrivers/atm/idt77252.c
- include/linux/atmdev.h 1 addition, 1 deletioninclude/linux/atmdev.h
- include/net/sock.h 4 additions, 4 deletionsinclude/net/sock.h
- net/atm/br2684.c 1 addition, 1 deletionnet/atm/br2684.c
- net/atm/clip.c 1 addition, 1 deletionnet/atm/clip.c
- net/atm/common.c 5 additions, 5 deletionsnet/atm/common.c
- net/atm/lec.c 2 additions, 2 deletionsnet/atm/lec.c
- net/atm/mpc.c 2 additions, 2 deletionsnet/atm/mpc.c
- net/atm/pppoatm.c 1 addition, 1 deletionnet/atm/pppoatm.c
- net/atm/raw.c 1 addition, 1 deletionnet/atm/raw.c
- net/atm/signaling.c 1 addition, 1 deletionnet/atm/signaling.c
- net/caif/caif_socket.c 1 addition, 1 deletionnet/caif/caif_socket.c
- net/core/datagram.c 1 addition, 1 deletionnet/core/datagram.c
- net/core/skbuff.c 1 addition, 1 deletionnet/core/skbuff.c
- net/core/sock.c 13 additions, 13 deletionsnet/core/sock.c
- net/ipv4/af_inet.c 1 addition, 1 deletionnet/ipv4/af_inet.c
- net/ipv4/esp4.c 1 addition, 1 deletionnet/ipv4/esp4.c
- net/ipv4/ip_output.c 3 additions, 3 deletionsnet/ipv4/ip_output.c
Loading
Please register or sign in to comment