Eric Dumazet c0f84d0d4b sch_teql: should not dereference skb after ndo_start_xmit() ...

It is illegal to dereference a skb after a successful ndo_start_xmit()
call. We must store skb length in a local variable instead.

Bug was introduced in 2.6.27 by commit 0abf77e55a2459aa9905be4b226e4729d5b4f0cb
(net_sched: Add accessor function for packet length for qdiscs)

Signed-off-by: Eric Dumazet <dada1@cosmosbay.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2009-05-18 15:12:31 -07:00

..

9p

…

802

tr: fix leakage of device in net/802/tr.c

2009-04-11 01:43:17 -07:00

8021q

vlan: update vlan carrier state for admin up/down

2009-04-25 18:03:35 -07:00

appletalk

…

atm

Subject: [PATCH] br2684: restore net_dev initialization

2009-05-02 13:49:36 -07:00

ax25

ax25: proc uid file misses header

2009-04-20 02:14:59 -07:00

bluetooth

Bluetooth: Don't trigger disconnect timeout for security mode 3 pairing

2009-05-09 18:09:52 -07:00

bridge

bridge: fix initial packet flood if !STP

2009-05-17 21:12:55 -07:00

can

can: Network Drop Monitor: Make use of consume_skb() in af_can.c

2009-04-17 01:38:46 -07:00

core

netpoll: don't dereference NULL dev from np

2009-05-17 20:37:55 -07:00

dcb

…

dccp

…

decnet

…

dsa

…

econet

…

ethernet

…

ipv4

tcp: fix MSG_PEEK race check

2009-05-18 15:05:40 -07:00

ipv6

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-2.6

2009-05-05 12:00:53 -07:00

ipx

…

irda

…

iucv

af_iucv: Fix race when queuing incoming iucv messages

2009-04-21 23:43:15 -07:00

key

…

lapb

…

llc

…

mac80211

mac80211: avoid NULL ptr deref when finding max_rates in PID and minstrel

2009-05-11 15:07:01 -04:00

netfilter

ipvs: Fix IPv4 FWMARK virtual services

2009-05-08 14:54:47 -07:00

netlabel

netlabel: Always remove the correct address selector

2009-04-22 00:46:09 -07:00

netlink

…

netrom

net/netrom: Fix socket locking

2009-04-22 00:49:51 -07:00

packet

packet: avoid warnings when high-order page allocation fails

2009-04-15 03:39:52 -07:00

phonet

…

rds

FRV: Fix the section attribute on UP DECLARE_PER_CPU()

2009-04-21 19:39:59 -07:00

rfkill

…

rose

Revert "rose: zero length frame filtering in af_rose.c"

2009-04-14 20:28:00 -07:00

rxrpc

…

sched

sch_teql: should not dereference skb after ndo_start_xmit()

2009-05-18 15:12:31 -07:00

sctp

…

sunrpc

Merge branch 'for-2.6.30' of git://linux-nfs.org/~bfields/linux

2009-05-12 17:11:56 -07:00

tipc

…

unix

…

wanrouter

…

wimax

wimax: oops: wimax_dev_add() is the only one that can initialize the state

2009-05-06 13:48:37 -07:00

wireless

cfg80211: fix comment on regulatory hint processing

2009-05-04 16:22:14 -04:00

x25

…

xfrm

xfrm: wrong hash value for temporary SA

2009-04-27 02:58:59 -07:00

compat.c

…

Kconfig

net: remove stale reference to fastroute from Kconfig help text

2009-05-07 16:31:01 -07:00

Makefile

…

nonet.c

…

socket.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6

2009-04-06 18:05:43 -07:00

sysctl_net.c

…

TUNABLE

…