[TCP]: tcp_twkill leaves death row list in inconsistent state over tcp_timewait_kill.

011c262e · Olof Johansson · David S. Miller · 4502a4e1 · 011c262e
Commit 011c262e authored May 06, 2003 by Olof Johansson Committed by David S. Miller May 06, 2003
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

net/ipv4/tcp_minisocks.c net/ipv4/tcp_minisocks.c +2 -0

No files found.
--- a/net/ipv4/tcp_minisocks.c
+++ b/net/ipv4/tcp_minisocks.c
@@ -444,6 +444,8 @@ static void SMP_TIMER_NAME(tcp_twkill)(unsigned long dummy)

 	while((tw = tcp_tw_death_row[tcp_tw_death_row_slot]) != NULL) {
 		tcp_tw_death_row[tcp_tw_death_row_slot] = tw->next_death;
+		if (tw->next_death)
+			tw->next_death->pprev_death = tw->pprev_death;
 		tw->pprev_death = NULL;
 		spin_unlock(&tw_death_lock);