Skip to content
Commit 104a4933 authored by Jason Wang's avatar Jason Wang Committed by David S. Miller
Browse files

macvtap: fix use after free for skb_array during release



We've clean skb_array in macvtap_put_queue() but still try to pop from
it during macvtap_sock_destruct(). Fix this use after free by moving
the skb array cleanup to macvtap_sock_destruct() instead.

Fixes: 362899b8 ("macvtap: switch to use skb array")
Reported-by: default avatarCornelia Huck <cornelia.huck@de.ibm.com>
Tested-by: default avatarCornelia Huck <cornelia.huck@de.ibm.com>
Signed-off-by: default avatarJason Wang <jasowang@redhat.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 4b5b9ba5
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment