Unverified Commit e9673af8 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!7424 net: openvswitch: Fix Use-After-Free in ovs_ct_exit 

Merge Pull Request from: @ci-robot 
 
PR sync from: Zhengchao Shao <shaozhengchao@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/GJJPH5CJRSTTV7O7GBIHBE6TA7T4FJPH/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9O0MV 
 
Link:https://gitee.com/openeuler/kernel/pulls/7424

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents 814d7b4c eaa8eb2b

net/openvswitch/conntrack.c

+2 −2
Original line number Diff line number Diff line
@@ -1901,9 +1901,9 @@ static void ovs_ct_limit_exit(struct net *net, struct ovs_net *ovs_net) 
	for (i = 0; i < CT_LIMIT_HASH_BUCKETS; ++i) {

		struct hlist_head *head = &info->limits[i];

		struct ovs_ct_limit *ct_limit;

		struct hlist_node *next;



		hlist_for_each_entry_rcu(ct_limit, head, hlist_node,

					 lockdep_ovsl_is_held())

		hlist_for_each_entry_safe(ct_limit, next, head, hlist_node)

			kfree_rcu(ct_limit, rcu);

	}

	kfree(info->limits);