summaryrefslogtreecommitdiffstats
path: root/net/sched/sch_atm.c
diff options
context:
space:
mode:
authorPatrick McHardy <kaber@trash.net>2007-06-05 16:06:59 -0700
committerDavid S. Miller <davem@sunset.davemloft.net>2007-06-07 13:41:05 -0700
commitb00b4bf94edb42852d55619af453588b2de2dc5e (patch)
tree01f79f50daf04a1f73a5d93365307711907b3169 /net/sched/sch_atm.c
parent7c355f532dd43036622e1880c114773463bafd23 (diff)
downloadop-kernel-dev-b00b4bf94edb42852d55619af453588b2de2dc5e.zip
op-kernel-dev-b00b4bf94edb42852d55619af453588b2de2dc5e.tar.gz
[NET_SCHED]: Fix filter double free
cbq and atm destroy their filters twice when destroying inner classes during qdisc destruction. Reported-and-tested-by: Strobl Anton <a.strobl@aws-it.at> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/sched/sch_atm.c')
-rw-r--r--net/sched/sch_atm.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/net/sched/sch_atm.c b/net/sched/sch_atm.c
index be7d299..d1c383f 100644
--- a/net/sched/sch_atm.c
+++ b/net/sched/sch_atm.c
@@ -599,6 +599,7 @@ static void atm_tc_destroy(struct Qdisc *sch)
/* races ? */
while ((flow = p->flows)) {
tcf_destroy_chain(flow->filter_list);
+ flow->filter_list = NULL;
if (flow->ref > 1)
printk(KERN_ERR "atm_destroy: %p->ref = %d\n",flow,
flow->ref);
OpenPOWER on IntegriCloud