Messages in this thread | | | Subject | strange crashes in tcp_poll() via epoll_wait | From | Eric Dumazet <> | Date | Fri, 19 Jul 2013 09:24:17 -0700 |
| |
Hi Al
I tried to debug strange crashes in tcp_poll() called from sys_epoll_wait() -> sock_poll()
The symptom is that sock->sk is NULL and we therefore dereference a NULL pointer.
It's really rare crashes but still, it would be nice to understand where is the bug. Presumably latest kernels would crash in sock_poll() because of the sk_can_busy_loop(sock->sk) call.
We do test sock->sk being NULL in sock_fasync(), but epoll should be safe because of existing synchronization (epmutex) ?
Any idea?
Thanks !
| |