original_kernel/net/sched
Eric Dumazet 21de12ee55 netem: fix a use after free
If the packet was dropped by lower qdisc, then we must not
access it later.

Save qdisc_pkt_len(skb) in a temp variable.

Fixes: 2ccccf5fb4 ("net_sched: update hierarchical backlog too")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: WANG Cong <xiyou.wangcong@gmail.com>
Cc: Jamal Hadi Salim <jhs@mojatatu.com>
Cc: Stephen Hemminger <stephen@networkplumber.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2016-06-23 15:07:44 -04:00
..
Kconfig
Makefile
act_api.c net sched actions: bug fix dumping actions directly didnt produce NLMSG_DONE 2016-06-15 14:02:53 -07:00
act_bpf.c bpf: wire in data and data_end for cls_act_bpf 2016-05-06 16:01:54 -04:00
act_connmark.c sched: align nlattr properly when needed 2016-04-26 12:00:49 -04:00
act_csum.c sched: align nlattr properly when needed 2016-04-26 12:00:49 -04:00
act_gact.c net/sched: act_gact: Update statistics when offloaded to hardware 2016-05-16 13:43:50 -04:00
act_ife.c act_ife: acquire ife_mod_lock before reading ifeoplist 2016-06-23 12:02:36 -04:00
act_ipt.c act_ipt: fix a bind refcnt leak 2016-06-15 12:31:35 -07:00
act_meta_mark.c
act_meta_skbprio.c
act_mirred.c net_sched: close another race condition in tcf_mirred_release() 2016-05-17 12:40:28 -04:00
act_nat.c sched: align nlattr properly when needed 2016-04-26 12:00:49 -04:00
act_pedit.c sched: align nlattr properly when needed 2016-04-26 12:00:49 -04:00
act_police.c act_police: fix a crash during removal 2016-06-07 16:38:59 -07:00
act_simple.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2016-05-15 13:32:48 -04:00
act_skbedit.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2016-05-15 13:32:48 -04:00
act_vlan.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2016-05-15 13:32:48 -04:00
cls_api.c
cls_basic.c
cls_bpf.c bpf: wire in data and data_end for cls_act_bpf 2016-05-06 16:01:54 -04:00
cls_cgroup.c
cls_flow.c
cls_flower.c net: sched: fix tc_should_offload for specific clsact classes 2016-06-07 16:59:53 -07:00
cls_fw.c
cls_route.c
cls_rsvp.c
cls_rsvp.h
cls_rsvp6.c
cls_tcindex.c
cls_u32.c net: cls_u32: be more strict about skip-sw flag for knodes 2016-06-08 21:43:14 -07:00
em_canid.c
em_cmp.c
em_ipset.c
em_meta.c
em_nbyte.c
em_text.c
em_u32.c
ematch.c
sch_api.c net_sched: avoid too many hrtimer_start() calls 2016-05-24 14:49:14 -07:00
sch_atm.c
sch_blackhole.c
sch_cbq.c
sch_choke.c
sch_codel.c codel: split into multiple files 2016-04-25 16:44:27 -04:00
sch_drr.c sch_drr: update backlog as well 2016-06-03 19:24:04 -04:00
sch_dsmark.c
sch_fifo.c net_sched: fix pfifo_head_drop behavior vs backlog 2016-06-14 17:17:58 -04:00
sch_fq.c
sch_fq_codel.c fq_codel: return non zero qlen in class dumps 2016-06-07 16:28:11 -07:00
sch_generic.c net_sched: keep backlog updated with qlen 2016-06-06 21:14:29 -04:00
sch_gred.c
sch_hfsc.c sch_hfsc: always keep backlog updated 2016-06-03 19:24:04 -04:00
sch_hhf.c
sch_htb.c htb: call qdisc_root with rcu read lock held 2016-06-15 14:42:46 -07:00
sch_ingress.c net: sched: fix tc_should_offload for specific clsact classes 2016-06-07 16:59:53 -07:00
sch_mq.c
sch_mqprio.c
sch_multiq.c
sch_netem.c netem: fix a use after free 2016-06-23 15:07:44 -04:00
sch_pie.c
sch_plug.c
sch_prio.c net_sched: prio: insure proper transactional behavior 2016-06-15 12:29:54 -07:00
sch_qfq.c qfq: don't leak skb if kzalloc fails 2016-06-08 22:41:38 -07:00
sch_red.c sch_red: update backlog as well 2016-06-03 19:24:04 -04:00
sch_sfb.c
sch_sfq.c
sch_tbf.c sch_tbf: update backlog as well 2016-06-03 19:24:04 -04:00
sch_teql.c