tree 8d0cc32bdbfda4d992177aeda56700bea0f918dd
parent 06770843c2f0f929a6e0c758dc433902a01aabfb
author David S. Miller <davem@davemloft.net> 1220411655 -0700
committer David S. Miller <davem@davemloft.net> 1220411655 -0700

ipsec: Fix deadlock in xfrm_state management.

Ever since commit 4c563f7669c10a12354b72b518c2287ffc6ebfb3
("[XFRM]: Speed up xfrm_policy and xfrm_state walking") it is
illegal to call __xfrm_state_destroy (and thus xfrm_state_put())
with xfrm_state_lock held.  If we do, we'll deadlock since we
have the lock already and __xfrm_state_destroy() tries to take
it again.

Fix this by pushing the xfrm_state_put() calls after the lock
is dropped.

Signed-off-by: David S. Miller <davem@davemloft.net>