Unverified Commit dbdf30d2 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14054 net: sched: fix use-after-free in taprio_change() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Wang Liang <wangliang74@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/XJZGXOOOXDC3DFVKHZ754FVRQQPAAAOH/ 
 
https://gitee.com/src-openeuler/kernel/issues/IB2BWJ 
 
Link:https://gitee.com/openeuler/kernel/pulls/14054

 

Reviewed-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
Reviewed-by: default avatarLi Nan <linan122@huawei.com>
Signed-off-by: default avatarLi Nan <linan122@huawei.com>
parents f5f1af57 8b004ea2

net/sched/sch_taprio.c

+2 −1
Original line number Diff line number Diff line
@@ -1599,7 +1599,8 @@ static int taprio_change(struct Qdisc *sch, struct nlattr *opt, 


		taprio_start_sched(sch, start, new_admin);



		rcu_assign_pointer(q->admin_sched, new_admin);

		admin = rcu_replace_pointer(q->admin_sched, new_admin,

					    lockdep_rtnl_is_held());

		if (admin)

			call_rcu(&admin->rcu, taprio_free_sched_cb);