diff options
| author | Ignat Korchagin <ignat@cloudflare.com> | 2024-10-14 16:38:00 +0100 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2024-10-15 18:43:07 -0700 |
| commit | 46f2a11cb82b657fd15bab1c47821b635e03838b (patch) | |
| tree | c672257cfcad494edf338ce282f75958e35d672d /tools/perf/scripts/python/parallel-perf.py | |
| parent | net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (diff) | |
| download | linux-46f2a11cb82b657fd15bab1c47821b635e03838b.tar.gz linux-46f2a11cb82b657fd15bab1c47821b635e03838b.zip | |
af_packet: avoid erroring out after sock_init_data() in packet_create()
After sock_init_data() the allocated sk object is attached to the provided
sock object. On error, packet_create() frees the sk object leaving the
dangling pointer in the sock object on return. Some other code may try
to use this pointer and cause use-after-free.
Suggested-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Ignat Korchagin <ignat@cloudflare.com>
Reviewed-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Reviewed-by: Willem de Bruijn <willemb@google.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Link: https://patch.msgid.link/20241014153808.51894-2-ignat@cloudflare.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python/parallel-perf.py')
0 files changed, 0 insertions, 0 deletions