Sabrina Dubroca a534dc5298 ipvlan: fix use after free of skb ... ipvlan_handle_frame is a rx_handler, and when it returns a value other than RX_HANDLER_CONSUMED (here, NET_RX_DROP aka RX_HANDLER_ANOTHER), __netif_receive_skb_core expects that the skb still exists and will process it further, but we just freed it. Fixes: 2ad7bf3638 ("ipvlan: Initial check-in of the IPVLAN driver.") Signed-off-by: Sabrina Dubroca <sd@queasysnail.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2015-11-17 14:39:29 -05:00
..
ipvlan_core.c	ipvlan: fix use after free of skb	2015-11-17 14:39:29 -05:00
ipvlan_main.c	net: ipvlan: convert to using IFF_NO_QUEUE	2015-08-18 11:55:06 -07:00
ipvlan.h	ipvlan: use rcu_deference_bh() in ipvlan_queue_xmit()	2015-07-15 21:33:40 -07:00
Makefile