net: sched: Fix use after free in red_enqueue()
[ Upstream commit
560791417591637132e4eb90164b9e665e9d5f13 ]
We can't use "skb" again after passing it to qdisc_enqueue(). This is
basically identical to commit
f3b6138bca9f ("sch_sfb: Also store skb
len before calling child enqueue").
Fixes: 344a46181fff ("sch_red: update backlog as well")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>