tree 08c7be2ba1d046fca40bbb1d3ddac789b393ecc9
parent 15d99e02babae8bc20b836917ace07d93e318149
author Patrick McHardy <kaber@trash.net> 1142923254 -0800
committer David S. Miller <davem@davemloft.net> 1142923254 -0800

[XFRM]: Fix aevent related crash

When xfrm_user isn't loaded xfrm_nl is NULL, which makes IPsec crash because
xfrm_aevent_is_on passes the NULL pointer to netlink_has_listeners as socket.
A second problem is that the xfrm_nl pointer is not cleared when the socket
is releases at module unload time.

Protect references of xfrm_nl from outside of xfrm_user by RCU, check
that the socket is present in xfrm_aevent_is_on and set it to NULL
when unloading xfrm_user.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>