Unverified Commit cf1d3c6a authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!9851 net/sched: act_skbmod: prevent kernel-infoleak 

Merge Pull Request from: @ci-robot 
 
PR sync from: Guo Mengqi <guomengqi3@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/ZXPKF6US6AXV3IJZZSZ3YQWEF5YIAKFM/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9QG2F 
 
Link:https://gitee.com/openeuler/kernel/pulls/9851

 

Reviewed-by: default avatarWeilong Chen <chenweilong@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents 79ef24df aa5ae360

net/sched/act_skbmod.c

+5 −5
Original line number Diff line number Diff line
@@ -219,13 +219,13 @@ static int tcf_skbmod_dump(struct sk_buff *skb, struct tc_action *a, 
	struct tcf_skbmod *d = to_skbmod(a);

	unsigned char *b = skb_tail_pointer(skb);

	struct tcf_skbmod_params  *p;

	struct tc_skbmod opt = {

		.index   = d->tcf_index,

		.refcnt  = refcount_read(&d->tcf_refcnt) - ref,

		.bindcnt = atomic_read(&d->tcf_bindcnt) - bind,

	};

	struct tc_skbmod opt;

	struct tcf_t t;



	memset(&opt, 0, sizeof(opt));

	opt.index   = d->tcf_index;

	opt.refcnt  = refcount_read(&d->tcf_refcnt) - ref,

	opt.bindcnt = atomic_read(&d->tcf_bindcnt) - bind;

	spin_lock_bh(&d->tcf_lock);

	opt.action = d->tcf_action;

	p = rcu_dereference_protected(d->skbmod_p,