Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1460698
| From | David Miller <davem@davemloft.net> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | Re: [PATCH net] macvtap: fix use after free for skb_array during release |
| Date | 2016-08-11 19:00 +0200 |
| Message-ID | <s51uO-6pu-17@gated-at.bofh.it> (permalink) |
| References | <s4VfI-2u4-29@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
From: Jason Wang <jasowang@redhat.com>
Date: Thu, 11 Aug 2016 18:15:56 +0800
> We've clean skb_array in macvtap_put_queue() but still try to pop from
> it during macvtap_sock_destruct(). Fix this use after free by moving
> the skb array cleanup to macvtap_sock_destruct() instead.
>
> Fixes: 362899b8725b ("macvtap: switch to use skb array")
> Reported-by: Cornelia Huck <cornelia.huck@de.ibm.com>
> Tested-by: Cornelia Huck <cornelia.huck@de.ibm.com>
> Signed-off-by: Jason Wang <jasowang@redhat.com>
Applied, thanks for fixing this so quickly Jason.
Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread
[PATCH net] macvtap: fix use after free for skb_array during release Jason Wang <jasowang@redhat.com> - 2016-08-11 12:20 +0200 Re: [PATCH net] macvtap: fix use after free for skb_array during release David Miller <davem@davemloft.net> - 2016-08-11 19:00 +0200
csiph-web