diff options
| author | WANG Cong <xiyou.wangcong@gmail.com> | 2015-07-14 11:21:57 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2015-07-15 21:36:34 -0700 |
| commit | e8d092aafd9e68c04d7b468e95ff7a617998a796 (patch) | |
| tree | acfe1c185e7af00334a03cc684c0ac6f7cfb6dbb /net/sched | |
| parent | 51f65e3c0d1ba3450372ac519e1bceb04c19133c (diff) | |
| download | op-kernel-dev-e8d092aafd9e68c04d7b468e95ff7a617998a796.zip op-kernel-dev-e8d092aafd9e68c04d7b468e95ff7a617998a796.tar.gz | |
net_sched: fix a use-after-free in sfq
Fixes: 25331d6ce42b ("net: sched: implement qstat helper routines")
Cc: John Fastabend <john.fastabend@gmail.com>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: Cong Wang <cwang@twopensource.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/sched')
| -rw-r--r-- | net/sched/sch_sfq.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/sched/sch_sfq.c b/net/sched/sch_sfq.c index 7d14926..52f75a5 100644 --- a/net/sched/sch_sfq.c +++ b/net/sched/sch_sfq.c @@ -306,10 +306,10 @@ drop: len = qdisc_pkt_len(skb); slot->backlog -= len; sfq_dec(q, x); - kfree_skb(skb); sch->q.qlen--; qdisc_qstats_drop(sch); qdisc_qstats_backlog_dec(sch, skb); + kfree_skb(skb); return len; } |
