Revision e7820e39b7d19b9fe1928fc19de9361b44150ca6 authored by Eric Dumazet on 21 November 2014, 19:47:16 UTC, committed by David S. Miller on 21 November 2014, 20:26:32 UTC
Not sure what I was thinking, but doing anything after releasing a refcount is suicidal or/and embarrassing. By the time we set skb->fclone to SKB_FCLONE_FREE, another cpu could have released last reference and freed whole skb. We potentially corrupt memory or trap if CONFIG_DEBUG_PAGEALLOC is set. Reported-by: Chris Mason <clm@fb.com> Fixes: ce1a4ea3f1258 ("net: avoid one atomic operation in skb_clone()") Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Sabrina Dubroca <sd@queasysnail.net> Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 892d6eb
File | Mode | Size |
---|---|---|
isapnp | ||
pnpacpi | ||
pnpbios | ||
Kconfig | -rw-r--r-- | 1.3 KB |
Makefile | -rw-r--r-- | 331 bytes |
base.h | -rw-r--r-- | 5.8 KB |
card.c | -rw-r--r-- | 10.0 KB |
core.c | -rw-r--r-- | 4.8 KB |
driver.c | -rw-r--r-- | 6.3 KB |
interface.c | -rw-r--r-- | 10.9 KB |
manager.c | -rw-r--r-- | 9.9 KB |
quirks.c | -rw-r--r-- | 12.1 KB |
resource.c | -rw-r--r-- | 16.6 KB |
support.c | -rw-r--r-- | 4.8 KB |
system.c | -rw-r--r-- | 2.7 KB |
![swh spinner](/static/img/swh-spinner.gif)
Computing file changes ...