https://github.com/torvalds/linux
Revision 5b01014759991887b1e450c9def01e58c02ab81b authored by Sabrina Dubroca on 02 December 2016, 15:49:29 UTC, committed by David S. Miller on 02 December 2016, 19:07:11 UTC
geneve{,6}_build_skb can end up doing a pskb_expand_head(), which
makes the ip_hdr(skb) reference we stashed earlier stale. Since it's
only needed as an argument to ip_tunnel_ecn_encap(), move this
directly in the function call.
Fixes: 08399efc6319 ("geneve: ensure ECN info is handled properly in all tx/rx paths")
Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Reviewed-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 3de81b7
Tip revision: 5b01014759991887b1e450c9def01e58c02ab81b authored by Sabrina Dubroca on 02 December 2016, 15:49:29 UTC
geneve: avoid use-after-free of skb->data
geneve: avoid use-after-free of skb->data
Tip revision: 5b01014
| File | Mode | Size |
|---|---|---|
| 80211 | ||
| ABI | ||
| DocBook | ||
| EDID | ||
| PCI | ||
| RCU | ||
| accounting | ||
| acpi | ||
| aoe | ||
| arm | ||
| arm64 | ||
| auxdisplay | ||
| backlight | ||
| blackfin | ||
| block | ||
| blockdev | ||
| bus-devices | ||
| cdrom | ||
| cgroup-v1 | ||
| cma | ||
| connector | ||
| console | ||
| cpu-freq | ||
| cpuidle | ||
| cris | ||
| crypto | ||
| dev-tools | ||
| development-process | ||
| device-mapper | ||
| devicetree | ||
| dmaengine | ||
| driver-api | ||
| driver-model | ||
| early-userspace | ||
| extcon | ||
| fault-injection | ||
| fb | ||
| features | ||
| filesystems | ||
| firmware_class | ||
| fmc | ||
| fpga | ||
| frv | ||
| gpio | ||
| gpu | ||
| hid | ||
| hwmon | ||
| i2c | ||
| ia64 | ||
| ide | ||
| iio | ||
| infiniband | ||
| input | ||
| ioctl | ||
| isdn | ||
| ja_JP | ||
| kbuild | ||
| kdump | ||
| ko_KR | ||
| laptops | ||
| leds | ||
| livepatch | ||
| locking | ||
| m68k | ||
| media | ||
| memory-devices | ||
| metag | ||
| mic | ||
| mips | ||
| misc-devices | ||
| mmc | ||
| mn10300 | ||
| mtd | ||
| namespaces | ||
| netlabel | ||
| networking | ||
| nfc | ||
| nios2 | ||
| nvdimm | ||
| nvmem | ||
| parisc | ||
| pcmcia | ||
| perf | ||
| phy | ||
| platform | ||
| power | ||
| powerpc | ||
| pps | ||
| prctl | ||
| pti | ||
| ptp | ||
| rapidio | ||
| s390 | ||
| scheduler | ||
| scsi | ||
| security | ||
| serial | ||
| sh | ||
| sound | ||
| sphinx | ||
| sphinx-static | ||
| spi | ||
| sysctl | ||
| target | ||
| thermal | ||
| timers | ||
| tpm | ||
| trace | ||
| usb | ||
| virtual | ||
| vm | ||
| w1 | ||
| watchdog | ||
| wimax | ||
| x86 | ||
| xtensa | ||
| zh_CN | ||
| .gitignore | -rw-r--r-- | 13 bytes |
| 00-INDEX | -rw-r--r-- | 16.8 KB |
| BUG-HUNTING | -rw-r--r-- | 8.1 KB |
| Changes | -rw-r--r-- | 12.8 KB |
| CodeOfConflict | -rw-r--r-- | 1.4 KB |
| CodingStyle | -rw-r--r-- | 35.5 KB |
| DMA-API-HOWTO.txt | -rw-r--r-- | 34.6 KB |
| DMA-API.txt | -rw-r--r-- | 27.8 KB |
| DMA-ISA-LPC.txt | -rw-r--r-- | 5.2 KB |
| DMA-attributes.txt | -rw-r--r-- | 6.5 KB |
| HOWTO | -rw-r--r-- | 27.5 KB |
| IPMI.txt | -rw-r--r-- | 29.4 KB |
| IRQ-affinity.txt | -rw-r--r-- | 2.5 KB |
| IRQ-domain.txt | -rw-r--r-- | 10.6 KB |
| IRQ.txt | -rw-r--r-- | 962 bytes |
| Intel-IOMMU.txt | -rw-r--r-- | 3.8 KB |
| Makefile | -rw-r--r-- | 12 bytes |
| Makefile.sphinx | -rw-r--r-- | 3.9 KB |
| ManagementStyle | -rw-r--r-- | 13.1 KB |
| SAK.txt | -rw-r--r-- | 2.8 KB |
| SM501.txt | -rw-r--r-- | 2.8 KB |
| SecurityBugs | -rw-r--r-- | 1.9 KB |
| SubmitChecklist | -rw-r--r-- | 4.7 KB |
| SubmittingDrivers | -rw-r--r-- | 6.3 KB |
| SubmittingPatches | -rw-r--r-- | 36.4 KB |
| VGA-softcursor.txt | -rw-r--r-- | 2.0 KB |
| adding-syscalls.txt | -rw-r--r-- | 23.8 KB |
| applying-patches.txt | -rw-r--r-- | 18.5 KB |
| assoc_array.txt | -rw-r--r-- | 20.0 KB |
| atomic_ops.txt | -rw-r--r-- | 22.0 KB |
| bad_memory.txt | -rw-r--r-- | 1.1 KB |
| basic_profiling.txt | -rw-r--r-- | 1.7 KB |
| bcache.txt | -rw-r--r-- | 23.4 KB |
| binfmt_misc.txt | -rw-r--r-- | 7.0 KB |
| braille-console.txt | -rw-r--r-- | 1.4 KB |
| bt8xxgpio.txt | -rw-r--r-- | 4.3 KB |
| btmrvl.txt | -rw-r--r-- | 2.9 KB |
| bus-virt-phys-mapping.txt | -rw-r--r-- | 7.9 KB |
| cachetlb.txt | -rw-r--r-- | 17.1 KB |
| cgroup-v2.txt | -rw-r--r-- | 56.7 KB |
| circular-buffers.txt | -rw-r--r-- | 8.4 KB |
| clk.txt | -rw-r--r-- | 10.4 KB |
| conf.py | -rw-r--r-- | 16.2 KB |
| cpu-hotplug.txt | -rw-r--r-- | 16.8 KB |
| cpu-load.txt | -rw-r--r-- | 3.0 KB |
| cputopology.txt | -rw-r--r-- | 5.3 KB |
| crc32.txt | -rw-r--r-- | 8.5 KB |
| dcdbas.txt | -rw-r--r-- | 3.6 KB |
| debugging-modules.txt | -rw-r--r-- | 954 bytes |
| debugging-via-ohci1394.txt | -rw-r--r-- | 7.4 KB |
| dell_rbu.txt | -rw-r--r-- | 4.9 KB |
| devices.txt | -rw-r--r-- | 115.1 KB |
| digsig.txt | -rw-r--r-- | 2.8 KB |
| dma-buf-sharing.txt | -rw-r--r-- | 22.0 KB |
| docutils.conf | -rw-r--r-- | 158 bytes |
| dontdiff | -rw-r--r-- | 2.5 KB |
| dynamic-debug-howto.txt | -rw-r--r-- | 12.6 KB |
| edac.txt | -rw-r--r-- | 24.7 KB |
| efi-stub.txt | -rw-r--r-- | 3.2 KB |
| eisa.txt | -rw-r--r-- | 7.1 KB |
| email-clients.txt | -rw-r--r-- | 10.8 KB |
| flexible-arrays.txt | -rw-r--r-- | 5.5 KB |
| futex-requeue-pi.txt | -rw-r--r-- | 5.0 KB |
| gcc-plugins.txt | -rw-r--r-- | 2.9 KB |
| highuid.txt | -rw-r--r-- | 2.4 KB |
| hw_random.txt | -rw-r--r-- | 3.5 KB |
| hwspinlock.txt | -rw-r--r-- | 12.7 KB |
| index.rst | -rw-r--r-- | 552 bytes |
| init.txt | -rw-r--r-- | 2.5 KB |
| initrd.txt | -rw-r--r-- | 14.1 KB |
| intel_txt.txt | -rw-r--r-- | 10.2 KB |
| io-mapping.txt | -rw-r--r-- | 3.2 KB |
| io_ordering.txt | -rw-r--r-- | 1.9 KB |
| iostats.txt | -rw-r--r-- | 8.0 KB |
| irqflags-tracing.txt | -rw-r--r-- | 2.3 KB |
| isa.txt | -rw-r--r-- | 5.2 KB |
| isapnp.txt | -rw-r--r-- | 433 bytes |
| java.txt | -rw-r--r-- | 10.9 KB |
| kernel-doc-nano-HOWTO.txt | -rw-r--r-- | 11.8 KB |
| kernel-docs.txt | -rw-r--r-- | 25.9 KB |
| kernel-documentation.rst | -rw-r--r-- | 23.0 KB |
| kernel-parameters.txt | -rw-r--r-- | 160.1 KB |
| kernel-per-CPU-kthreads.txt | -rw-r--r-- | 13.2 KB |
| kobject.txt | -rw-r--r-- | 18.0 KB |
| kprobes.txt | -rw-r--r-- | 30.8 KB |
| kref.txt | -rw-r--r-- | 8.4 KB |
| kselftest.txt | -rw-r--r-- | 2.5 KB |
| ldm.txt | -rw-r--r-- | 3.8 KB |
| local_ops.txt | -rw-r--r-- | 6.5 KB |
| lockup-watchdogs.txt | -rw-r--r-- | 4.1 KB |
| logo.gif | -rw-r--r-- | 16.0 KB |
| logo.txt | -rw-r--r-- | 563 bytes |
| lzo.txt | -rw-r--r-- | 7.8 KB |
| magic-number.txt | -rw-r--r-- | 8.7 KB |
| mailbox.txt | -rw-r--r-- | 4.1 KB |
| md-cluster.txt | -rw-r--r-- | 12.4 KB |
| md.txt | -rw-r--r-- | 25.3 KB |
| memory-barriers.txt | -rw-r--r-- | 115.5 KB |
| memory-hotplug.txt | -rw-r--r-- | 18.0 KB |
| men-chameleon-bus.txt | -rw-r--r-- | 6.1 KB |
| module-signing.txt | -rw-r--r-- | 10.6 KB |
| mono.txt | -rw-r--r-- | 2.5 KB |
| nommu-mmap.txt | -rw-r--r-- | 12.7 KB |
| ntb.txt | -rw-r--r-- | 6.3 KB |
| numastat.txt | -rw-r--r-- | 836 bytes |
| oops-tracing.txt | -rw-r--r-- | 12.8 KB |
| padata.txt | -rw-r--r-- | 7.3 KB |
| parport-lowlevel.txt | -rw-r--r-- | 32.2 KB |
| parport.txt | -rw-r--r-- | 8.8 KB |
| percpu-rw-semaphore.txt | -rw-r--r-- | 1.1 KB |
| phy.txt | -rw-r--r-- | 7.5 KB |
| pi-futex.txt | -rw-r--r-- | 5.7 KB |
| pinctrl.txt | -rw-r--r-- | 50.4 KB |
| pnp.txt | -rw-r--r-- | 6.8 KB |
| preempt-locking.txt | -rw-r--r-- | 5.2 KB |
| printk-formats.txt | -rw-r--r-- | 10.3 KB |
| pwm.txt | -rw-r--r-- | 6.1 KB |
| ramoops.txt | -rw-r--r-- | 5.6 KB |
| rbtree.txt | -rw-r--r-- | 13.3 KB |
| remoteproc.txt | -rw-r--r-- | 12.7 KB |
| rfkill.txt | -rw-r--r-- | 5.0 KB |
| robust-futex-ABI.txt | -rw-r--r-- | 8.7 KB |
| robust-futexes.txt | -rw-r--r-- | 9.4 KB |
| rpmsg.txt | -rw-r--r-- | 13.3 KB |
| rtc.txt | -rw-r--r-- | 10.3 KB |
| serial-console.txt | -rw-r--r-- | 4.0 KB |
| sgi-ioc4.txt | -rw-r--r-- | 2.0 KB |
| smsc_ece1099.txt | -rw-r--r-- | 2.4 KB |
| stable_api_nonsense.txt | -rw-r--r-- | 9.3 KB |
| stable_kernel_rules.txt | -rw-r--r-- | 6.5 KB |
| static-keys.txt | -rw-r--r-- | 11.7 KB |
| svga.txt | -rw-r--r-- | 14.1 KB |
| sync_file.txt | -rw-r--r-- | 3.1 KB |
| sysfs-rules.txt | -rw-r--r-- | 9.0 KB |
| sysrq.txt | -rw-r--r-- | 11.8 KB |
| this_cpu_ops.txt | -rw-r--r-- | 11.1 KB |
| unaligned-memory-access.txt | -rw-r--r-- | 10.4 KB |
| unicode.txt | -rw-r--r-- | 6.5 KB |
| unshare.txt | -rw-r--r-- | 13.1 KB |
| vfio.txt | -rw-r--r-- | 21.3 KB |
| video-output.txt | -rw-r--r-- | 1.1 KB |
| vme_api.txt | -rw-r--r-- | 13.5 KB |
| volatile-considered-harmful.txt | -rw-r--r-- | 5.6 KB |
| workqueue.txt | -rw-r--r-- | 14.7 KB |
| xillybus.txt | -rw-r--r-- | 17.7 KB |
| xz.txt | -rw-r--r-- | 5.7 KB |
| zorro.txt | -rw-r--r-- | 2.9 KB |
Computing file changes ...
