iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/net
History
Jason Wang 104a493390 macvtap: fix use after free for skb_array during release 
We've clean skb_array in macvtap_put_queue() but still try to pop from
it during macvtap_sock_destruct(). Fix this use after free by moving
the skb array cleanup to macvtap_sock_destruct() instead.

Fixes: 362899b8725b ("macvtap: switch to use skb array")
Reported-by: Cornelia Huck <cornelia.huck@de.ibm.com>
Tested-by: Cornelia Huck <cornelia.huck@de.ibm.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2016-08-11 09:55:51 -07:00
..
appletalk
treewide: replace dev->trans_start update with helper
2016-05-04 14:16:49 -04:00
arcnet
…
bonding
bonding: fix the typo
2016-08-09 14:57:14 -07:00
caif
net: caif: use correct format specifier
2016-08-01 13:32:51 -07:00
can
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2016-06-30 05:03:36 -04:00
cris
treewide: replace dev->trans_start update with helper
2016-05-04 14:16:49 -04:00
dsa
net: dsa: b53: Add missing ULL suffix for 64-bit constant
2016-08-06 00:11:08 -04:00
ethernet
net: hns: fix typo in g_gmac_stats_string[]
2016-08-10 17:57:50 -07:00
fddi
net: skfb: remove obsolete -I cflag
2016-06-15 22:06:06 -07:00
fjes
net: fjes: fjes_main: Remove create_workqueue
2016-06-03 19:29:42 -04:00
hamradio
hamradio: baycom: fix old-style declaration
2016-06-16 22:06:30 -07:00
hippi
…
hyperv
hv_netvsc: Fix VF register on bonding devices
2016-07-25 11:19:22 -07:00
ieee802154
mrf24j40: avoid uninitialized byte in SPI transfer to radio.
2016-07-12 11:54:53 +02:00
ipvlan
ipvlan: Scrub skb before crossing the namespace boundry
2016-07-25 21:47:26 -07:00
irda
net: irda: avoid null pointer dereference
2016-05-19 11:30:57 -07:00
phy
net: phy: micrel: Add specific suspend
2016-08-09 16:19:15 -07:00
plip
…
ppp
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2016-07-24 00:53:32 -04:00
slip
treewide: replace dev->trans_start update with helper
2016-05-04 14:16:49 -04:00
team
net: introduce default neigh_construct/destroy ndo calls for L2 upper devices
2016-07-05 09:06:28 -07:00
usb
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2016-07-27 12:03:20 -07:00
vmxnet3
vmxnet3: update to version 3
2016-06-16 22:37:05 -07:00
wan
wan/fsl_ucc_hdlc: avoid possible NULL pointer dereference
2016-08-01 13:32:52 -07:00
wimax
treewide: replace dev->trans_start update with helper
2016-05-04 14:16:49 -04:00
wireless
mac80211: Add ieee80211_hw pointer to get_expected_throughput
2016-08-05 14:23:25 +02:00
xen-netback
xen-netback: only deinitialized hash if it was initialized
2016-05-20 17:41:18 -04:00
dummy.c
…
eql.c
…
geneve.c
drivers/net: fixup comments after "Future-proof tunnel offload handlers"
2016-07-11 13:42:11 -07:00
gtp.c
gtp: remove unused including <linux/version.h>
2016-06-17 22:28:49 -07:00
ifb.c
ifb: support more features
2016-05-09 00:00:28 -04:00
Kconfig
gtp: add initial driver for datapath of GPRS Tunneling Protocol (GTP-U)
2016-05-10 12:25:04 -04:00
LICENSE.SRC
…
loopback.c
loopback: make use of NETIF_F_GSO_SOFTWARE
2016-06-03 19:37:21 -04:00
macsec.c
macsec: fix negative refcnt on parent link
2016-07-30 21:11:08 -07:00
macvlan.c
net: macvlan: call netdev_lockdep_set_classes()
2016-06-09 13:28:37 -07:00
macvtap.c
macvtap: fix use after free for skb_array during release
2016-08-11 09:55:51 -07:00
Makefile
gtp: add initial driver for datapath of GPRS Tunneling Protocol (GTP-U)
2016-05-10 12:25:04 -04:00
mdio.c
…
mii.c
…
netconsole.c
…
nlmon.c
…
ntb_netdev.c
…
rionet.c
…
sb1000.c
…
Space.c
net: Fix coding style warnings and errors.
2016-05-19 11:48:27 -07:00
sungem_phy.c
…
tun.c
tun: Don't assume type tun in tun_device_event
2016-07-08 23:58:57 -04:00
veth.c
…
virtio_net.c
virtio-net: Remove more stack DMA
2016-07-19 19:25:43 -07:00
vrf.c
net: vrf: Add support for PREROUTING rules on vrf device
2016-07-05 11:50:05 -07:00
vxlan.c
net: vxlan: lwt: Fix vxlan local traffic.
2016-08-08 14:16:24 -07:00
xen-netfront.c
…