Re: [PATCH net v2] net: rose: fix UAF bug caused by rose_t0timer_expiry

From: Jakub Kicinski
Date: Wed Jul 06 2022 - 22:02:44 EST


On Tue, 5 Jul 2022 20:56:10 +0800 Duoming Zhou wrote:
> + del_timer_sync(&rose_neigh->t0timer);

/**
* del_timer_sync - deactivate a timer and wait for the handler to finish.
[...]
* Synchronization rules: Callers must prevent restarting of the timer,
* otherwise this function is meaningless.

how is the restarting prevented? If I'm looking right
rose_t0timer_expiry() rearms the timer.