]> git.baikalelectronics.ru Git - kernel.git/commit
net: sched: Fix use after free in red_enqueue()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 28 Oct 2022 15:05:00 +0000 (18:05 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 10 Nov 2022 16:57:50 +0000 (17:57 +0100)
commitaaf62d3c8f83ef140a43a0df9a9f1a39701d4b75
tree242706a0e5099c1c1b5b46e9cf23812c46129524
parentbc4d50e36ad2c832fcba19973ed970d66f5bed3c
net: sched: Fix use after free in red_enqueue()

[ Upstream commit 38c8f9c083bb317c50b7005b60f894ed2ce55ee9 ]

We can't use "skb" again after passing it to qdisc_enqueue().  This is
basically identical to commit 258f79873422 ("sch_sfb: Also store skb
len before calling child enqueue").

Fixes: aa2a87c46c4f ("sch_red: update backlog as well")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/sched/sch_red.c