Searched hist:f6bab199315b70fd83fe3ee0947bc84c7a35f3d4 (Results 1 – 7 of 7) sorted by relevance
/linux/net/sched/ |
H A D | sch_cbs.c | diff f6bab199315b70fd83fe3ee0947bc84c7a35f3d4 Wed Jan 09 17:09:42 CET 2019 Toke Høiland-Jørgensen <toke@redhat.com> sched: Avoid dereferencing skb pointer after child enqueue
Parent qdiscs may dereference the pointer to the enqueued skb after enqueue. However, both CAKE and TBF call consume_skb() on the original skb when splitting GSO packets, leading to a potential use-after-free in the parent. Fix this by avoiding dereferencing the skb pointer after enqueueing to the child.
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
|
H A D | sch_prio.c | diff f6bab199315b70fd83fe3ee0947bc84c7a35f3d4 Wed Jan 09 17:09:42 CET 2019 Toke Høiland-Jørgensen <toke@redhat.com> sched: Avoid dereferencing skb pointer after child enqueue
Parent qdiscs may dereference the pointer to the enqueued skb after enqueue. However, both CAKE and TBF call consume_skb() on the original skb when splitting GSO packets, leading to a potential use-after-free in the parent. Fix this by avoiding dereferencing the skb pointer after enqueueing to the child.
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
|
H A D | sch_drr.c | diff f6bab199315b70fd83fe3ee0947bc84c7a35f3d4 Wed Jan 09 17:09:42 CET 2019 Toke Høiland-Jørgensen <toke@redhat.com> sched: Avoid dereferencing skb pointer after child enqueue
Parent qdiscs may dereference the pointer to the enqueued skb after enqueue. However, both CAKE and TBF call consume_skb() on the original skb when splitting GSO packets, leading to a potential use-after-free in the parent. Fix this by avoiding dereferencing the skb pointer after enqueueing to the child.
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
|
H A D | sch_tbf.c | diff f6bab199315b70fd83fe3ee0947bc84c7a35f3d4 Wed Jan 09 17:09:42 CET 2019 Toke Høiland-Jørgensen <toke@redhat.com> sched: Avoid dereferencing skb pointer after child enqueue
Parent qdiscs may dereference the pointer to the enqueued skb after enqueue. However, both CAKE and TBF call consume_skb() on the original skb when splitting GSO packets, leading to a potential use-after-free in the parent. Fix this by avoiding dereferencing the skb pointer after enqueueing to the child.
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
|
H A D | sch_hfsc.c | diff f6bab199315b70fd83fe3ee0947bc84c7a35f3d4 Wed Jan 09 17:09:42 CET 2019 Toke Høiland-Jørgensen <toke@redhat.com> sched: Avoid dereferencing skb pointer after child enqueue
Parent qdiscs may dereference the pointer to the enqueued skb after enqueue. However, both CAKE and TBF call consume_skb() on the original skb when splitting GSO packets, leading to a potential use-after-free in the parent. Fix this by avoiding dereferencing the skb pointer after enqueueing to the child.
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
|
H A D | sch_qfq.c | diff f6bab199315b70fd83fe3ee0947bc84c7a35f3d4 Wed Jan 09 17:09:42 CET 2019 Toke Høiland-Jørgensen <toke@redhat.com> sched: Avoid dereferencing skb pointer after child enqueue
Parent qdiscs may dereference the pointer to the enqueued skb after enqueue. However, both CAKE and TBF call consume_skb() on the original skb when splitting GSO packets, leading to a potential use-after-free in the parent. Fix this by avoiding dereferencing the skb pointer after enqueueing to the child.
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
|
H A D | sch_htb.c | diff f6bab199315b70fd83fe3ee0947bc84c7a35f3d4 Wed Jan 09 17:09:42 CET 2019 Toke Høiland-Jørgensen <toke@redhat.com> sched: Avoid dereferencing skb pointer after child enqueue
Parent qdiscs may dereference the pointer to the enqueued skb after enqueue. However, both CAKE and TBF call consume_skb() on the original skb when splitting GSO packets, leading to a potential use-after-free in the parent. Fix this by avoiding dereferencing the skb pointer after enqueueing to the child.
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
|