Unverified Commit 4a164f73 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!7426 net: gtp: Fix Use-After-Free in gtp_dellink 

Merge Pull Request from: @ci-robot 
 
PR sync from: Pu Lehui <pulehui@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/GY5RVR5CPNQIT5ILR64CFEHCM2K4DKBR/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9O0MU 
 
Link:https://gitee.com/openeuler/kernel/pulls/7426

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents a7f56b56 6b8b9e3b

drivers/net/gtp.c

+2 −1
Original line number Diff line number Diff line
@@ -700,11 +700,12 @@ static int gtp_newlink(struct net *src_net, struct net_device *dev, 
static void gtp_dellink(struct net_device *dev, struct list_head *head)

{

	struct gtp_dev *gtp = netdev_priv(dev);

	struct hlist_node *next;

	struct pdp_ctx *pctx;

	int i;



	for (i = 0; i < gtp->hash_size; i++)

		hlist_for_each_entry_rcu(pctx, &gtp->tid_hash[i], hlist_tid)

		hlist_for_each_entry_safe(pctx, next, &gtp->tid_hash[i], hlist_tid)

			pdp_context_delete(pctx);



	list_del_rcu(&gtp->list);