Thread (2 messages) flat view 2 messages, 2 authors, 2016-08-11

Re: [PATCH net] macvtap: fix use after free for skb_array during release

From: David Miller <davem@davemloft.net>
Date: 2016-08-11 16:56:25
Also in: lkml

From: Jason Wang <redacted>
Date: Thu, 11 Aug 2016 18:15:56 +0800
We've clean skb_array in macvtap_put_queue() but still try to pop from
it during macvtap_sock_destruct(). Fix this use after free by moving
the skb array cleanup to macvtap_sock_destruct() instead.

Fixes: 362899b8725b ("macvtap: switch to use skb array")
Reported-by: Cornelia Huck <redacted>
Tested-by: Cornelia Huck <redacted>
Signed-off-by: Jason Wang <redacted>
Applied, thanks for fixing this so quickly Jason.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help