summaryrefslogtreecommitdiff
path: root/net/tipc/bearer.c
diff options
context:
space:
mode:
authorErik Hugne <erik.hugne@ericsson.com>2015-02-27 08:56:55 +0100
committerDavid S. Miller <davem@davemloft.net>2015-02-27 18:18:47 -0500
commit7fe8097cef5ff4ba1c7ced42bda97830ce00eec6 (patch)
treed9461dce54e4dbe08b98db7db04e3b5ad224991e /net/tipc/bearer.c
parent3622c36f37640078c9a706b71e02e6334c85f9e9 (diff)
tipc: fix nullpointer bug when subscribing to events
If a subscription request is sent to a topology server connection, and any error occurs (malformed request, oom or limit reached) while processing this request, TIPC should terminate the subscriber connection. While doing so, it tries to access fields in an already freed (or never allocated) subscription element leading to a nullpointer exception. We fix this by removing the subscr_terminate function and terminate the connection immediately upon any subscription failure. Signed-off-by: Erik Hugne <erik.hugne@ericsson.com> Reviewed-by: Jon Maloy <jon.maloy@ericsson.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/tipc/bearer.c')
0 files changed, 0 insertions, 0 deletions