Unverified Commit 31f83f62 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!7425 net: gtp: Fix Use-After-Free in gtp_dellink 

Merge Pull Request from: @ci-robot 
 
PR sync from: Pu Lehui <pulehui@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/L6ZVOTXHVYWD2RETARXLW3PQSQDA65LZ/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9O0MU 
 
Link:https://gitee.com/openeuler/kernel/pulls/7425

 

Reviewed-by: default avatarLiu YongQiang <liuyongqiang13@huawei.com>
Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
parents 88c0a210 270701f0

drivers/net/gtp.c

+2 −1
Original line number Diff line number Diff line
@@ -707,11 +707,12 @@ static int gtp_newlink(struct net *src_net, struct net_device *dev, 
static void gtp_dellink(struct net_device *dev, struct list_head *head)

{

	struct gtp_dev *gtp = netdev_priv(dev);

	struct hlist_node *next;

	struct pdp_ctx *pctx;

	int i;



	for (i = 0; i < gtp->hash_size; i++)

		hlist_for_each_entry_rcu(pctx, &gtp->tid_hash[i], hlist_tid)

		hlist_for_each_entry_safe(pctx, next, &gtp->tid_hash[i], hlist_tid)

			pdp_context_delete(pctx);



	gtp_encap_disable(gtp);