| From foo@baz Fri Apr 11 08:46:36 PDT 2014 |
| From: David Stevens <dlstevens@us.ibm.com> |
| Date: Tue, 18 Mar 2014 12:32:29 -0400 |
| Subject: vxlan: fix potential NULL dereference in arp_reduce() |
| |
| From: David Stevens <dlstevens@us.ibm.com> |
| |
| [ Upstream commit 7346135dcd3f9b57f30a5512094848c678d7143e ] |
| |
| This patch fixes a NULL pointer dereference in the event of an |
| skb allocation failure in arp_reduce(). |
| |
| Signed-Off-By: David L Stevens <dlstevens@us.ibm.com> |
| Acked-by: Cong Wang <cwang@twopensource.com> |
| |
| Signed-off-by: David S. Miller <davem@davemloft.net> |
| Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
| --- |
| drivers/net/vxlan.c | 3 +++ |
| 1 file changed, 3 insertions(+) |
| |
| --- a/drivers/net/vxlan.c |
| +++ b/drivers/net/vxlan.c |
| @@ -845,6 +845,9 @@ static int arp_reduce(struct net_device |
| |
| neigh_release(n); |
| |
| + if (reply == NULL) |
| + goto out; |
| + |
| skb_reset_mac_header(reply); |
| __skb_pull(reply, skb_network_offset(reply)); |
| reply->ip_summed = CHECKSUM_UNNECESSARY; |
