sctp: fix panic when T2-shutdown timer expire on removed transport
authorWei Yongjun <yjwei@cn.fujitsu.com>
Sun, 26 Apr 2009 15:13:35 +0000 (23:13 +0800)
committerVlad Yasevich <vladislav.yasevich@hp.com>
Wed, 3 Jun 2009 13:14:46 +0000 (09:14 -0400)
commit6345b19985e9f3ec31b61720de01806e3ef680fe
treebb34bf4a7c0bc539e405a68c6835bb40d6b91147
parenta2c395846cf6abfdda3c04a19a0982adbb6469c2
sctp: fix panic when T2-shutdown timer expire on removed transport

If T2-shutdown timer is expired on a removed transport, kernel
panic will occur when we do failure management on that transport.
You can reproduce this use the following sequence:

  Endpoint A                           Endpoint B
  (ESTABLISHED)                        (ESTABLISHED)

                <-----------------      SHUTDOWN
                                        (SRC=X)
  ASCONF        ----------------->
  (Delete IP Address = X)
                <-----------------      ASCONF-ACK
                                        (Success Indication)
                <-----------------      SHUTDOWN
                                        (T2-shutdown timer expire)
This patch fixed the problem.

Signed-off-by: Wei Yongjun <yjwei@cn.fujitsu.com>
Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
net/sctp/associola.c
net/sctp/sm_statefuns.c