https://github.com/torvalds/linux
Revision 6b863d1d3239eff0f45c2e6e672f5b56db828db0 authored by Eric Dumazet on 17 November 2009, 14:45:04 UTC, committed by David S. Miller on 17 November 2009, 14:45:04 UTC
In case register_netdevice() returns an error, and a new vlan_group
was allocated and inserted in vlan_group_hash[] we call
vlan_group_free() without deleting group from hash table. Future
lookups can give infinite loops or crashes.

We must delete the vlan_group using RCU safe procedure.

Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 69c0cab
History
Tip revision: 6b863d1d3239eff0f45c2e6e672f5b56db828db0 authored by Eric Dumazet on 17 November 2009, 14:45:04 UTC
vlan: Fix register_vlan_dev() error path
Tip revision: 6b863d1
File Mode Size
Makefile -rw-r--r-- 384 bytes
compat.c -rw-r--r-- 17.0 KB
compat_mq.c -rw-r--r-- 4.0 KB
ipc_sysctl.c -rw-r--r-- 6.8 KB
ipcns_notifier.c -rw-r--r-- 2.2 KB
mq_sysctl.c -rw-r--r-- 2.8 KB
mqueue.c -rw-r--r-- 30.7 KB
msg.c -rw-r--r-- 20.8 KB
msgutil.c -rw-r--r-- 2.8 KB
namespace.c -rw-r--r-- 3.3 KB
sem.c -rw-r--r-- 33.9 KB
shm.c -rw-r--r-- 25.8 KB
util.c -rw-r--r-- 22.9 KB
util.h -rw-r--r-- 5.2 KB

back to top