Re: [PATCH net] tun: Fix use-after-free on XDP_TX
From: David Miller <davem@davemloft.net>
Date: 2018-07-16 21:08:18
From: Toshiaki Makita <redacted> Date: Fri, 13 Jul 2018 13:24:38 +0900
On XDP_TX we need to free up the frame only when tun_xdp_tx() returns a
negative value. A positive value indicates that the packet is
successfully enqueued to the ptr_ring, so freeing the page causes
use-after-free.
Fixes: 735fc4054b3a ("xdp: change ndo_xdp_xmit API to support bulking")
Signed-off-by: Toshiaki Makita <redacted>Applied, thank you.