Herbert Xu
0da2afd596
gro: Fix potential use after free
...
The initial skb may have been freed after napi_gro_complete in
napi_gro_receive if it was merged into an existing packet. Thus
we cannot check same_flow (which indicates whether it was merged)
after calling napi_gro_complete.
This patch fixes this by saving the same_flow status before the
call to napi_gro_complete.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au >
Signed-off-by: David S. Miller <davem@davemloft.net >
2008-12-26 14:57:42 -08:00
..
2008-11-21 17:15:03 -08:00
2008-11-20 20:32:15 -08:00
2008-12-25 16:45:19 -08:00
2008-12-25 18:04:51 -08:00
2008-12-08 01:14:16 -08:00
2008-12-14 23:17:26 -08:00
2008-12-23 17:56:23 -08:00
2008-11-28 02:19:15 -08:00
2008-12-14 23:16:58 -08:00
2008-12-26 14:57:42 -08:00
2008-12-21 20:10:29 -08:00
2008-12-17 16:08:01 -08:00
2008-12-10 15:18:31 -08:00
2008-12-10 15:18:31 -08:00
2008-07-19 22:34:43 -07:00
2008-11-23 23:24:32 -08:00
2008-12-26 01:31:18 -08:00
2008-12-16 02:08:29 -08:00
2008-11-03 18:21:05 -08:00
2008-12-14 23:18:30 -08:00
2008-09-30 03:03:35 -07:00
2008-11-25 17:59:00 -08:00
2008-01-28 14:56:52 -08:00
2008-11-21 17:15:03 -08:00
2008-12-19 15:24:00 -05:00
2008-12-15 20:03:50 -08:00
2008-12-15 20:03:50 -08:00
2008-11-28 03:05:19 -08:00
2008-11-03 18:21:05 -08:00
2008-11-24 00:09:29 -08:00
2008-12-17 15:48:50 -08:00
2008-12-12 14:45:25 -05:00
2008-11-26 23:48:40 -08:00
2008-12-10 15:18:31 -08:00
2008-12-22 19:44:13 -08:00
2008-12-25 16:59:03 -08:00
2008-12-15 20:03:50 -08:00
2008-11-07 23:37:50 -08:00
2008-12-02 19:50:27 -08:00
2008-11-20 04:26:21 -08:00
2008-12-19 15:22:54 -05:00
2008-11-03 18:21:05 -08:00
2008-12-18 22:27:37 -08:00
2008-11-19 18:49:57 -08:00
2008-11-21 11:08:18 -05:00
2008-11-25 01:02:08 -08:00
2006-03-28 09:16:06 -08:00
2008-12-23 17:56:23 -08:00
2008-07-27 09:45:34 -07:00