diff options
| author |   Nikolay Aleksandrov <nikolay@cumulusnetworks.com> | 2015-09-30 20:16:52 +0200 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2015-10-01 18:24:04 -0700 |
| commit | 468e7944589c7f096bb4ea14db17980aa6c2766c (patch) | |
| tree | 473b882e2365c413e85cef4adfef8ee41a4a819f /net/bridge/br_netlink.c | |
| parent | bridge: vlan: adjust rhashtable initial size and hash locks size (diff) | |
| download | linux-dev-468e7944589c7f096bb4ea14db17980aa6c2766c.tar.xz linux-dev-468e7944589c7f096bb4ea14db17980aa6c2766c.zip | |
bridge: vlan: fix possible null vlgrp deref while registering new port
While a new port is being initialized the rx_handler gets set, but the
vlans get initialized later in br_add_if() and in that window if we
receive a frame with a link-local address we can try to dereference
p->vlgrp in:
br_handle_frame() -> br_handle_local_finish() -> br_should_learn()
Fix this by checking vlgrp before using it.
Signed-off-by: Nikolay Aleksandrov <nikolay@cumulusnetworks.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/bridge/br_netlink.c')
0 files changed, 0 insertions, 0 deletions