Revision e196c0e579902f42cf72414461fb034e5a1ffbf7 authored by nikolay@redhat.com on 29 November 2012, 01:37:59 UTC, committed by David S. Miller on 29 November 2012, 18:13:15 UTC
Race between bonding_store_slaves_active() and slave manipulation functions. The bond_for_each_slave use in bonding_store_slaves_active() is not protected by any synchronization mechanism. NULL pointer dereference is easy to reach. Fixed by acquiring the bond->lock for the slave walk. v2: Make description text < 75 columns Signed-off-by: Nikolay Aleksandrov <nikolay@redhat.com> Signed-off-by: Jay Vosburgh <fubar@us.ibm.com> Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 90fb625