]> git.baikalelectronics.ru Git - kernel.git/commit
net: sched: Fix use after free in red_enqueue()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 28 Oct 2022 15:05:00 +0000 (18:05 +0300)
committerDavid S. Miller <davem@davemloft.net>
Mon, 31 Oct 2022 11:55:39 +0000 (11:55 +0000)
commit560791417591637132e4eb90164b9e665e9d5f13
tree98c2e409c49ff27666fae499d13663cb7f2d141e
parent2e49167d4ebed62014b122500f6f95635327efc2
net: sched: Fix use after free in red_enqueue()

We can't use "skb" again after passing it to qdisc_enqueue().  This is
basically identical to commit f3b6138bca9f ("sch_sfb: Also store skb
len before calling child enqueue").

Fixes: 344a46181fff ("sch_red: update backlog as well")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/sched/sch_red.c