| From foo@baz Fri Nov 7 11:36:50 PST 2014 |
| From: Li RongQing <roy.qing.li@gmail.com> |
| Date: Fri, 17 Oct 2014 14:06:16 +0800 |
| Subject: vxlan: fix a free after use |
| |
| From: Li RongQing <roy.qing.li@gmail.com> |
| |
| [ Upstream commit 7a9f526fc3ee49b6034af2f243676ee0a27dcaa8 ] |
| |
| pskb_may_pull maybe change skb->data and make eth pointer oboslete, |
| so eth needs to reload |
| |
| Fixes: 91269e390d062 ("vxlan: using pskb_may_pull as early as possible") |
| Cc: Eric Dumazet <edumazet@google.com> |
| Signed-off-by: Li RongQing <roy.qing.li@gmail.com> |
| Signed-off-by: David S. Miller <davem@davemloft.net> |
| Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
| --- |
| drivers/net/vxlan.c | 1 + |
| 1 file changed, 1 insertion(+) |
| |
| --- a/drivers/net/vxlan.c |
| +++ b/drivers/net/vxlan.c |
| @@ -1936,6 +1936,7 @@ static netdev_tx_t vxlan_xmit(struct sk_ |
| msg->icmph.icmp6_type == NDISC_NEIGHBOUR_SOLICITATION) |
| return neigh_reduce(dev, skb); |
| } |
| + eth = eth_hdr(skb); |
| #endif |
| } |
| |
