]> git.baikalelectronics.ru Git - kernel.git/commit
net/mlx5e: Fix use-after-free after xdp_return_frame
authorMaxim Mikityanskiy <maximmi@mellanox.com>
Fri, 15 Mar 2019 14:41:43 +0000 (16:41 +0200)
committerSaeed Mahameed <saeedm@mellanox.com>
Fri, 19 Apr 2019 20:55:36 +0000 (13:55 -0700)
commit7dca151125a70212d2e1e99e3179f5aa9916e758
tree3adab073f555fe66f509a876fd5866ff731bcc98
parent5ad738999dc0063957100d726f7f68d51548b6f7
net/mlx5e: Fix use-after-free after xdp_return_frame

xdp_return_frame releases the frame. It leads to releasing the page, so
it's not allowed to access xdpi.xdpf->len after that, because xdpi.xdpf
is at xdp->data_hard_start after convert_to_xdp_frame. This patch moves
the memory access to precede the return of the frame.

Fixes: a13d5a30f715f ("net/mlx5e: Add support for XDP_REDIRECT in device-out side")
Signed-off-by: Maxim Mikityanskiy <maximmi@mellanox.com>
Signed-off-by: Saeed Mahameed <saeedm@mellanox.com>
drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c