Tomas Bortoli 5f04d296f2 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree() ... commit 430ac66eb4 upstream. The patch adds the flush in p9_mux_poll_stop() as it the function used by p9_conn_destroy(), in turn called by p9_fd_close() to stop the async polling associated with the data regarding the connection. Link: http://lkml.kernel.org/r/20180720092730.27104-1-tomasbortoli@gmail.com Signed-off-by: Tomas Bortoli <tomasbortoli@gmail.com> Reported-by: syzbot+39749ed7d9ef6dfb23f6@syzkaller.appspotmail.com To: Eric Van Hensbergen <ericvh@gmail.com> To: Ron Minnich <rminnich@sandia.gov> To: Latchesar Ionkov <lucho@ionkov.net> Cc: Yiwen Jiang <jiangyiwen@huwei.com> Cc: stable@vger.kernel.org Signed-off-by: Dominique Martinet <dominique.martinet@cea.fr> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-09-09 19:55:55 +02:00
..
client.c	net/9p/client.c: version pointer uninitialized	2018-09-09 19:55:55 +02:00
error.c	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
Kconfig	xen/9pfs: select CONFIG_XEN_XENBUS_FRONTEND	2017-05-02 11:14:36 +02:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
mod.c
protocol.c	net/9p: switch to copy_from_iter_full()	2017-04-21 13:57:22 -04:00
protocol.h
trans_common.c	net/9p: remove (now-)unused helpers	2015-04-11 22:28:29 -04:00
trans_common.h	net/9p: remove (now-)unused helpers	2015-04-11 22:28:29 -04:00
trans_fd.c	net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()	2018-09-09 19:55:55 +02:00
trans_rdma.c	9p: fix multiple NULL-pointer-dereferences	2018-09-09 19:55:55 +02:00
trans_virtio.c	9p/virtio: fix off-by-one error in sg list bounds check	2018-09-09 19:55:55 +02:00
trans_xen.c	9p: fix multiple NULL-pointer-dereferences	2018-09-09 19:55:55 +02:00
util.c	net/9p: convert to idr_alloc()	2013-02-27 19:10:20 -08:00