tree 28481ae5aebac58c5fe29e0f08eddff4e80289f6
parent b7058842c940ad2c08dd829b21e5c92ebe3b8758
author Eric Dumazet <eric.dumazet@gmail.com> 1253789364 +0000
committer David S. Miller <davem@davemloft.net> 1254352838 -0700

net: Fix sock_wfree() race

Commit 2b85a34e911bf483c27cfdd124aeb1605145dc80
(net: No more expensive sock_hold()/sock_put() on each tx)
opens a window in sock_wfree() where another cpu
might free the socket we are working on.

A fix is to call sk->sk_write_space(sk) while still
holding a reference on sk.

Reported-by: Jike Song <albcamus@gmail.com>
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>