Re: [PATCH net v2] net: rose: fix UAF bug caused by rose_t0timer_expiry
From: Jakub Kicinski
Date: Wed Jul 06 2022 - 22:02:44 EST
On Tue, 5 Jul 2022 20:56:10 +0800 Duoming Zhou wrote:
> + del_timer_sync(&rose_neigh->t0timer);
/**
* del_timer_sync - deactivate a timer and wait for the handler to finish.
[...]
* Synchronization rules: Callers must prevent restarting of the timer,
* otherwise this function is meaningless.
how is the restarting prevented? If I'm looking right
rose_t0timer_expiry() rearms the timer.