| From | Luis Henriques <> | Subject | [PATCH 3.16.y-ckt 072/170] vxlan: fix a free after use | Date | Tue, 11 Nov 2014 11:07:11 +0000 |
| |
3.16.7-ckt1 -stable review patch. If anyone has any objections, please let me know.
------------------
From: Li RongQing <roy.qing.li@gmail.com>
commit 7a9f526fc3ee49b6034af2f243676ee0a27dcaa8 upstream.
pskb_may_pull maybe change skb->data and make eth pointer oboslete, so eth needs to reload
Fixes: 91269e390d062 ("vxlan: using pskb_may_pull as early as possible") Cc: Eric Dumazet <edumazet@google.com> Signed-off-by: Li RongQing <roy.qing.li@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Luis Henriques <luis.henriques@canonical.com> --- drivers/net/vxlan.c | 1 + 1 file changed, 1 insertion(+)
diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c index 53b5bdeb45af..63ae2e3badab 100644 --- a/drivers/net/vxlan.c +++ b/drivers/net/vxlan.c @@ -1952,6 +1952,7 @@ static netdev_tx_t vxlan_xmit(struct sk_buff *skb, struct net_device *dev) msg->icmph.icmp6_type == NDISC_NEIGHBOUR_SOLICITATION) return neigh_reduce(dev, skb); } + eth = eth_hdr(skb); #endif } -- 2.1.0
|