linux/net/ipv4
David S. Miller 06dc94b1ed ipv4: Fix crash in dst_release when udp_sendmsg route lookup fails.
As reported by Eric:

[11483.697233] IP: [<c12b0638>] dst_release+0x18/0x60
 ...
[11483.697741] Call Trace:
[11483.697764]  [<c12fc9d2>] udp_sendmsg+0x282/0x6e0
[11483.697790]  [<c12a1c01>] ? memcpy_toiovec+0x51/0x70
[11483.697818]  [<c12dbd90>] ? ip_generic_getfrag+0x0/0xb0

The pointer passed to dst_release() is -EINVAL, that's because
we leave an error pointer in the local variable "rt" by accident.

NULL it out to fix the bug.

Reported-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2011-03-03 10:38:01 -08:00
..
netfilter Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2011-02-04 14:28:58 -08:00
af_inet.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
ah4.c ipsec: allow to align IPv4 AH on 32 bits 2011-02-08 14:00:40 -08:00
arp.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
cipso_ipv4.c
datagram.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
devinet.c Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2011-02-19 19:17:35 -08:00
esp4.c
fib_frontend.c ipv4: Implement __ip_dev_find using new interface address hash. 2011-02-18 12:43:09 -08:00
fib_lookup.h ipv4: Remember FIB alias list head and table in lookup results. 2011-01-31 16:10:03 -08:00
fib_rules.c ipv4: Use const'ify fib_result deep in the route call chains. 2011-02-17 15:54:42 -08:00
fib_semantics.c ipv4: fix rcu lock imbalance in fib_select_default() 2011-02-14 11:23:04 -08:00
fib_trie.c ipv4: Avoid use of signed integers in fib_trie code. 2011-02-17 15:49:26 -08:00
gre.c
icmp.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
igmp.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
inet_connection_sock.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
inet_diag.c
inet_fragment.c
inet_hashtables.c
inet_lro.c
inet_timewait_sock.c tcp: fix inet_twsk_deschedule() 2011-02-19 18:59:04 -08:00
inetpeer.c inetpeer: Add redirect and PMTU discovery cached info. 2011-02-10 13:29:30 -08:00
ip_forward.c
ip_fragment.c
ip_gre.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
ip_input.c
ip_options.c
ip_output.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
ip_sockglue.c
ipcomp.c
ipconfig.c
ipip.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
ipmr.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
Kconfig ipv4: Remove fib_hash. 2011-02-01 15:35:25 -08:00
Makefile ipv4: Remove fib_hash. 2011-02-01 15:35:25 -08:00
netfilter.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
proc.c
protocol.c
raw.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
route.c ipv4: ip_route_output_key() is better as an inline. 2011-03-02 14:56:30 -08:00
syncookies.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
sysctl_net_ipv4.c
tcp_bic.c
tcp_cong.c
tcp_cubic.c
tcp_diag.c
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c
tcp_illinois.c
tcp_input.c tcp: Increase the initial congestion window to 10. 2011-02-02 20:48:47 -08:00
tcp_ipv4.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
tcp_lp.c
tcp_minisocks.c
tcp_output.c
tcp_probe.c
tcp_scalable.c
tcp_timer.c tcp: Remove debug macro of TCP_CHECK_TIMER 2011-02-20 11:10:14 -08:00
tcp_vegas.c
tcp_vegas.h
tcp_veno.c
tcp_westwood.c
tcp_yeah.c
tcp.c tcp: Remove debug macro of TCP_CHECK_TIMER 2011-02-20 11:10:14 -08:00
tunnel4.c
udp_impl.h
udp.c ipv4: Fix crash in dst_release when udp_sendmsg route lookup fails. 2011-03-03 10:38:01 -08:00
udplite.c
xfrm4_input.c
xfrm4_mode_beet.c
xfrm4_mode_transport.c
xfrm4_mode_tunnel.c
xfrm4_output.c
xfrm4_policy.c ipv4: Make output route lookup return rtable directly. 2011-03-02 14:31:35 -08:00
xfrm4_state.c xfrm: Const'ify tmpl and address arguments to ->init_temprop() 2011-02-23 23:07:37 -08:00
xfrm4_tunnel.c