Commit e8d092aa authored Jul 14, 2015 by WANG Cong Committed by David S. Miller Jul 15, 2015

net_sched: fix a use-after-free in sfq



Fixes: 25331d6c ("net: sched: implement qstat helper routines")
Cc: John Fastabend <john.fastabend@gmail.com>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: Cong Wang <cwang@twopensource.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent 51f65e3c

net/sched/sch_sfq.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -306,10 +306,10 @@ static unsigned int sfq_drop(struct Qdisc *sch)
		len = qdisc_pkt_len(skb);
		slot->backlog -= len;
		sfq_dec(q, x);
		kfree_skb(skb);
		sch->q.qlen--;
		qdisc_qstats_drop(sch);
		qdisc_qstats_backlog_dec(sch, skb);
		kfree_skb(skb);
		return len;
		}