diff options
| author | Martin Pieuchot <mpi@cvs.openbsd.org> | 2017-11-13 17:00:15 +0000 |
|---|---|---|
| committer | Martin Pieuchot <mpi@cvs.openbsd.org> | 2017-11-13 17:00:15 +0000 |
| commit | 1d4caf6d1b91d1ea98aef189ed3d31f2179882c3 (patch) | |
| tree | 50b7ca2baddfdee5be293e4d8023bf63ce47de94 /include/sysexits.h | |
| parent | 0542bf745efc81d71934e43e5316fee595807eff (diff) | |
Grab the KERNEL_LOCK() to iterate on the global list of PF_KEY sockets.
It isn't safe to manipulate PF_KEY sockets without KERNEL_LOCK() because
they aren't protected by the NET_LOCK().
I missed this in my previous audit and neither my tests, the regression
tests nor the IPsec performance tests exposed the problem. Hopefully I
added the right check to soassertlocked() a while back.
Found the hardway by and ok sthen@
Diffstat (limited to 'include/sysexits.h')
0 files changed, 0 insertions, 0 deletions