]> git.proxmox.com Git - mirror_ubuntu-disco-kernel.git/commit
ila: Fix rhashtable walker list corruption
authorHerbert Xu <herbert@gondor.apana.org.au>
Tue, 26 Mar 2019 05:50:14 +0000 (13:50 +0800)
committerSeth Forshee <seth.forshee@canonical.com>
Wed, 3 Apr 2019 18:11:41 +0000 (13:11 -0500)
commit283ed6e5bfc26ef4681b566e726468a9854417ae
tree59ceb5edc93af8f19986440a12f9d3071761204a
parent819909a8545b47dfd5445a5d3d2f1e6787ea9bd6
ila: Fix rhashtable walker list corruption

BugLink: https://bugs.launchpad.net/bugs/1823060
[ Upstream commit b5f9bd15b88563b55a99ed588416881367a0ce5f ]

ila_xlat_nl_cmd_flush uses rhashtable walkers allocated from the
stack but it never frees them.  This corrupts the walker list of
the hash table.

This patch fixes it.

Reported-by: syzbot+dae72a112334aa65a159@syzkaller.appspotmail.com
Fixes: b6e71bdebb12 ("ila: Flush netlink command to clear xlat...")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
net/ipv6/ila/ila_xlat.c