From 7c3f0265b981c08b643e62a4b07fe3a57c8ed196 Mon Sep 17 00:00:00 2001 From: Sven Eckelmann Date: Sat, 2 Jun 2018 16:25:44 +0200 Subject: [PATCH] batman-adv: Fix best gw refcnt after netlink dump A reference to the best gateway is taken when the list of gateways in the mesh is sent via netlink. This is necessary to check whether the currently dumped entry is the currently selected gateway or not. This information is then transferred as flag BATADV_ATTR_FLAG_BEST. After the comparison of the current entry is done, batadv_*_gw_dump_entry() has to decrease the reference counter again. Otherwise the reference will be held and thus prevents a proper shutdown of the batman-adv interfaces (and some of the interfaces enslaved in it). Fixes: 899235a4a637 ("Merge pull request #241 from ecsv/batman-adv-2016.4-maint-2016-10-29") Reported-by: Andreas Ziegler Signed-off-by: Sven Eckelmann --- ...ix-best-gw-refcnt-after-netlink-dump.patch | 119 ++++++++++++++++++ 1 file changed, 119 insertions(+) create mode 100644 patches/packages/routing/0002-batman-adv-Fix-best-gw-refcnt-after-netlink-dump.patch diff --git a/patches/packages/routing/0002-batman-adv-Fix-best-gw-refcnt-after-netlink-dump.patch b/patches/packages/routing/0002-batman-adv-Fix-best-gw-refcnt-after-netlink-dump.patch new file mode 100644 index 00000000..6a56631c --- /dev/null +++ b/patches/packages/routing/0002-batman-adv-Fix-best-gw-refcnt-after-netlink-dump.patch @@ -0,0 +1,119 @@ +From: Sven Eckelmann +Date: Sat, 2 Jun 2018 16:25:16 +0200 +Subject: batman-adv: Fix best gw refcnt after netlink dump + +A reference to the best gateway is taken when the list of gateways in the +mesh is sent via netlink. This is necessary to check whether the currently +dumped entry is the currently selected gateway or not. This information is +then transferred as flag BATADV_ATTR_FLAG_BEST. + +After the comparison of the current entry is done, +batadv_*_gw_dump_entry() has to decrease the reference counter again. +Otherwise the reference will be held and thus prevents a proper shutdown of +the batman-adv interfaces (and some of the interfaces enslaved in it). + +Fixes: 215d6b834fd1 ("batman-adv: upgrade package to latest release 2016.4") +Reported-by: Andreas Ziegler +Signed-off-by: Sven Eckelmann + +diff --git a/batman-adv/patches/0002-batman-adv-Fix-bat_ogm_iv-best-gw-refcnt-after-netli.patch b/batman-adv/patches/0002-batman-adv-Fix-bat_ogm_iv-best-gw-refcnt-after-netli.patch +new file mode 100644 +index 0000000000000000000000000000000000000000..cd384e847ff14beda3051e67d5c93762dd786ddd +--- /dev/null ++++ b/batman-adv/patches/0002-batman-adv-Fix-bat_ogm_iv-best-gw-refcnt-after-netli.patch +@@ -0,0 +1,45 @@ ++From: Sven Eckelmann ++Date: Sat, 2 Jun 2018 16:08:22 +0200 ++Subject: [PATCH] batman-adv: Fix bat_ogm_iv best gw refcnt after netlink dump ++ ++A reference to the best gateway is taken when the list of gateways in the ++mesh is sent via netlink. This is necessary to check whether the currently ++dumped entry is the currently selected gateway or not. This information is ++then transferred as flag BATADV_ATTR_FLAG_BEST. ++ ++After the comparison of the current entry is done, ++batadv_iv_gw_dump_entry() has to decrease the reference counter again. ++Otherwise the reference will be held and thus prevents a proper shutdown of ++the batman-adv interfaces (and some of the interfaces enslaved in it). ++ ++Fixes: fa3228924152 ("batman-adv: add B.A.T.M.A.N. IV bat_gw_dump implementations") ++Reported-by: Andreas Ziegler ++Signed-off-by: Sven Eckelmann ++--- ++ net/batman-adv/bat_iv_ogm.c | 6 ++++-- ++ 1 file changed, 4 insertions(+), 2 deletions(-) ++ ++diff --git a/net/batman-adv/bat_iv_ogm.c b/net/batman-adv/bat_iv_ogm.c ++index 8769fa1b17c8486e68041ee15fae08178b75567f..d8f2ca7a0122ba906d5df3e042c969e0ed2dd5ea 100644 ++--- a/net/batman-adv/bat_iv_ogm.c +++++ b/net/batman-adv/bat_iv_ogm.c ++@@ -2718,8 +2718,8 @@ static int batadv_iv_gw_dump_entry(struct sk_buff *msg, u32 portid, u32 seq, ++ { ++ struct batadv_neigh_ifinfo *router_ifinfo = NULL; ++ struct batadv_neigh_node *router; ++- struct batadv_gw_node *curr_gw; ++- int ret = -EINVAL; +++ struct batadv_gw_node *curr_gw = NULL; +++ int ret = 0; ++ void *hdr; ++ ++ router = batadv_orig_router_get(gw_node->orig_node, BATADV_IF_DEFAULT); ++@@ -2766,6 +2766,8 @@ static int batadv_iv_gw_dump_entry(struct sk_buff *msg, u32 portid, u32 seq, ++ ret = 0; ++ ++ out: +++ if (curr_gw) +++ batadv_gw_node_put(curr_gw); ++ if (router_ifinfo) ++ batadv_neigh_ifinfo_put(router_ifinfo); ++ if (router) +diff --git a/batman-adv/patches/0003-batman-adv-Fix-bat_v-best-gw-refcnt-after-netlink-du.patch b/batman-adv/patches/0003-batman-adv-Fix-bat_v-best-gw-refcnt-after-netlink-du.patch +new file mode 100644 +index 0000000000000000000000000000000000000000..0d0e08202af6410748f56662f2abc07175ece5a7 +--- /dev/null ++++ b/batman-adv/patches/0003-batman-adv-Fix-bat_v-best-gw-refcnt-after-netlink-du.patch +@@ -0,0 +1,44 @@ ++From: Sven Eckelmann ++Date: Sat, 2 Jun 2018 16:08:22 +0200 ++Subject: [PATCH] batman-adv: Fix bat_v best gw refcnt after netlink dump ++ ++A reference to the best gateway is taken when the list of gateways in the ++mesh is sent via netlink. This is necessary to check whether the currently ++dumped entry is the currently selected gateway or not. This information is ++then transferred as flag BATADV_ATTR_FLAG_BEST. ++ ++After the comparison of the current entry is done, ++batadv_v_gw_dump_entry() has to decrease the reference counter again. ++Otherwise the reference will be held and thus prevents a proper shutdown of ++the batman-adv interfaces (and some of the interfaces enslaved in it). ++ ++Fixes: 15315a94ad98 ("batman-adv: add B.A.T.M.A.N. V bat_gw_dump implementations") ++Signed-off-by: Sven Eckelmann ++--- ++ net/batman-adv/bat_v.c | 6 ++++-- ++ 1 file changed, 4 insertions(+), 2 deletions(-) ++ ++diff --git a/net/batman-adv/bat_v.c b/net/batman-adv/bat_v.c ++index 4e2724c5b33d8bda27339ffe65fc7d76f91fd119..371a1f1651b48d58beef141f002eec7bf3cfe556 100644 ++--- a/net/batman-adv/bat_v.c +++++ b/net/batman-adv/bat_v.c ++@@ -929,8 +929,8 @@ static int batadv_v_gw_dump_entry(struct sk_buff *msg, u32 portid, u32 seq, ++ { ++ struct batadv_neigh_ifinfo *router_ifinfo = NULL; ++ struct batadv_neigh_node *router; ++- struct batadv_gw_node *curr_gw; ++- int ret = -EINVAL; +++ struct batadv_gw_node *curr_gw = NULL; +++ int ret = 0; ++ void *hdr; ++ ++ router = batadv_orig_router_get(gw_node->orig_node, BATADV_IF_DEFAULT); ++@@ -997,6 +997,8 @@ static int batadv_v_gw_dump_entry(struct sk_buff *msg, u32 portid, u32 seq, ++ ret = 0; ++ ++ out: +++ if (curr_gw) +++ batadv_gw_node_put(curr_gw); ++ if (router_ifinfo) ++ batadv_neigh_ifinfo_put(router_ifinfo); ++ if (router)