hsr: switch ->dellink() to ->ndo_uninit()
authorCong Wang <xiyou.wangcong@gmail.com>
Wed, 10 Jul 2019 06:24:54 +0000 (23:24 -0700)
committerDavid S. Miller <davem@davemloft.net>
Thu, 11 Jul 2019 21:37:45 +0000 (14:37 -0700)
commit311633b604063a8a5d3fbc74d0565b42df721f68
tree38c375bc8034c2539c0f2111d2d72df43a3fc83f
parentaa4c0c9091b0bb4cb261bbe0718d17c2834c4690
hsr: switch ->dellink() to ->ndo_uninit()

Switching from ->priv_destructor to dellink() has an unexpected
consequence: existing RCU readers, that is, hsr_port_get_hsr()
callers, may still be able to read the port list.

Instead of checking the return value of each hsr_port_get_hsr(),
we can just move it to ->ndo_uninit() which is called after
device unregister and synchronize_net(), and we still have RTNL
lock there.

Fixes: b9a1e627405d ("hsr: implement dellink to clean up resources")
Fixes: edf070a0fb45 ("hsr: fix a NULL pointer deref in hsr_dev_xmit()")
Reported-by: syzbot+097ef84cdc95843fbaa8@syzkaller.appspotmail.com
Cc: Arvid Brodin <arvid.brodin@alten.se>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/hsr/hsr_device.c
net/hsr/hsr_device.h
net/hsr/hsr_netlink.c