diff options
author | 2022-02-28 06:22:22 +0100 | |
---|---|---|
committer | 2022-03-01 11:50:35 +0100 | |
commit | c3873070247d9e3c7a6b0cf9bf9b45e8018427b1 (patch) | |
tree | da192a08d0f995eaa2854d5033279ace339f2bcf /tools/perf/scripts/python/export-to-postgresql.py | |
parent | selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (diff) | |
download | linux-dev-c3873070247d9e3c7a6b0cf9bf9b45e8018427b1.tar.xz linux-dev-c3873070247d9e3c7a6b0cf9bf9b45e8018427b1.zip |
netfilter: nf_queue: fix possible use-after-free
Eric Dumazet says:
The sock_hold() side seems suspect, because there is no guarantee
that sk_refcnt is not already 0.
On failure, we cannot queue the packet and need to indicate an
error. The packet will be dropped by the caller.
v2: split skb prefetch hunk into separate change
Fixes: 271b72c7fa82c ("udp: RCU handling for Unicast packets.")
Reported-by: Eric Dumazet <eric.dumazet@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions