Eric Dumazet 21de12ee55 netem: fix a use after free ...

If the packet was dropped by lower qdisc, then we must not
access it later.

Save qdisc_pkt_len(skb) in a temp variable.

Fixes: 2ccccf5fb4 ("net_sched: update hierarchical backlog too")
Signed-off-by: Eric Dumazet <[email protected]>
Cc: WANG Cong <[email protected]>
Cc: Jamal Hadi Salim <[email protected]>
Cc: Stephen Hemminger <[email protected]>
Signed-off-by: David S. Miller <[email protected]>

2016-06-23 15:07:44 -04:00

..

act_api.c

net sched actions: bug fix dumping actions directly didnt produce NLMSG_DONE

2016-06-15 14:02:53 -07:00

act_bpf.c

bpf: wire in data and data_end for cls_act_bpf

2016-05-06 16:01:54 -04:00

act_connmark.c

sched: align nlattr properly when needed

2016-04-26 12:00:49 -04:00

act_csum.c

sched: align nlattr properly when needed

2016-04-26 12:00:49 -04:00

act_gact.c

net/sched: act_gact: Update statistics when offloaded to hardware

2016-05-16 13:43:50 -04:00

act_ife.c

act_ife: acquire ife_mod_lock before reading ifeoplist

2016-06-23 12:02:36 -04:00

act_ipt.c

act_ipt: fix a bind refcnt leak

2016-06-15 12:31:35 -07:00

act_meta_mark.c

Support to encoding decoding skb mark on IFE action

2016-03-01 17:15:23 -05:00

act_meta_skbprio.c

Support to encoding decoding skb prio on IFE action

2016-03-01 17:15:23 -05:00

act_mirred.c

net_sched: close another race condition in tcf_mirred_release()

2016-05-17 12:40:28 -04:00

act_nat.c

sched: align nlattr properly when needed

2016-04-26 12:00:49 -04:00

act_pedit.c

sched: align nlattr properly when needed

2016-04-26 12:00:49 -04:00

act_police.c

act_police: fix a crash during removal

2016-06-07 16:38:59 -07:00

act_simple.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-05-15 13:32:48 -04:00

act_skbedit.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-05-15 13:32:48 -04:00

act_vlan.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-05-15 13:32:48 -04:00

cls_api.c

net: sched: fix call_rcu() race on classifier module unloads

2015-05-21 18:48:18 -04:00

cls_basic.c

net_sched: destroy proto tp when all filters are gone

2015-03-09 15:35:55 -04:00

cls_bpf.c

bpf: wire in data and data_end for cls_act_bpf

2016-05-06 16:01:54 -04:00

cls_cgroup.c

cls_cgroup: factor out classid retrieval

2015-07-20 12:41:30 -07:00

cls_flow.c

sched: cls_flow: use skb_to_full_sk() helper

2015-11-08 20:56:39 -05:00

cls_flower.c

net: sched: fix tc_should_offload for specific clsact classes

2016-06-07 16:59:53 -07:00

cls_fw.c

net: revert "net_sched: move tp->root allocation into fw_init()"

2015-09-24 14:33:30 -07:00

cls_route.c

net_sched: destroy proto tp when all filters are gone

2015-03-09 15:35:55 -04:00

cls_rsvp6.c

…

cls_rsvp.c

…

cls_rsvp.h

net_sched: convert rsvp to call tcf_exts_destroy from rcu callback

2015-08-26 11:01:45 -07:00

cls_tcindex.c

net_sched: convert tcindex to call tcf_exts_destroy from rcu callback

2015-08-26 11:01:44 -07:00

cls_u32.c

net: cls_u32: be more strict about skip-sw flag for knodes

2016-06-08 21:43:14 -07:00

em_canid.c

net: sched: remove tcf_proto from ematch calls

2014-10-06 18:02:32 -04:00

em_cmp.c

…

em_ipset.c

netfilter: x_tables: Pass struct net in xt_action_param

2015-09-18 21:58:14 +02:00

em_meta.c

qdisc: constify meta_type_ops structures

2016-04-14 00:35:30 -04:00

em_nbyte.c

net: sched: remove tcf_proto from ematch calls

2014-10-06 18:02:32 -04:00

em_text.c

net: Remove state argument from skb_find_text()

2015-02-22 15:59:54 -05:00

em_u32.c

…

ematch.c

ematch: Fix auto-loading of ematch modules.

2015-02-20 15:30:56 -05:00

Kconfig

Support to encoding decoding skb prio on IFE action

2016-03-01 17:15:23 -05:00

Makefile

Support to encoding decoding skb prio on IFE action

2016-03-01 17:15:23 -05:00

sch_api.c

net_sched: avoid too many hrtimer_start() calls

2016-05-24 14:49:14 -07:00

sch_atm.c

net: sched: consolidate tc_classify{,_compat}

2015-08-27 14:18:48 -07:00

sch_blackhole.c

net/sched: make sch_blackhole.c explicitly non-modular

2015-10-09 07:52:28 -07:00

sch_cbq.c

net_sched: update hierarchical backlog too

2016-02-29 17:02:33 -05:00

sch_choke.c

net_sched: update hierarchical backlog too

2016-02-29 17:02:33 -05:00

sch_codel.c

codel: split into multiple files

2016-04-25 16:44:27 -04:00

sch_drr.c

sch_drr: update backlog as well

2016-06-03 19:24:04 -04:00

sch_dsmark.c

net_sched: dsmark: use qdisc_dequeue_peeked()

2016-03-08 14:35:13 -05:00

sch_fifo.c

net_sched: fix pfifo_head_drop behavior vs backlog

2016-06-14 17:17:58 -04:00

sch_fq_codel.c

fq_codel: return non zero qlen in class dumps

2016-06-07 16:28:11 -07:00

sch_fq.c

net_sched: update hierarchical backlog too

2016-02-29 17:02:33 -05:00

sch_generic.c

net_sched: keep backlog updated with qlen

2016-06-06 21:14:29 -04:00

sch_gred.c

net: sched: drop all special handling of tx_queue_len == 0

2015-08-18 11:55:08 -07:00

sch_hfsc.c

sch_hfsc: always keep backlog updated

2016-06-03 19:24:04 -04:00

sch_hhf.c

net_sched: update hierarchical backlog too

2016-02-29 17:02:33 -05:00

sch_htb.c

htb: call qdisc_root with rcu read lock held

2016-06-15 14:42:46 -07:00

sch_ingress.c

net: sched: fix tc_should_offload for specific clsact classes

2016-06-07 16:59:53 -07:00

sch_mq.c

net: sched: use pfifo_fast for non real queues

2016-03-03 17:38:46 -05:00

sch_mqprio.c

net: sched: use pfifo_fast for non real queues

2016-03-03 17:38:46 -05:00

sch_multiq.c

net_sched: update hierarchical backlog too

2016-02-29 17:02:33 -05:00

sch_netem.c

netem: fix a use after free

2016-06-23 15:07:44 -04:00

sch_pie.c

net_sched: update hierarchical backlog too

2016-02-29 17:02:33 -05:00

sch_plug.c

net: sched: drop all special handling of tx_queue_len == 0

2015-08-18 11:55:08 -07:00

sch_prio.c

net_sched: prio: insure proper transactional behavior

2016-06-15 12:29:54 -07:00

sch_qfq.c

qfq: don't leak skb if kzalloc fails

2016-06-08 22:41:38 -07:00

sch_red.c

sch_red: update backlog as well

2016-06-03 19:24:04 -04:00

sch_sfb.c

net_sched: update hierarchical backlog too

2016-02-29 17:02:33 -05:00

sch_sfq.c

net_sched: update hierarchical backlog too

2016-02-29 17:02:33 -05:00

sch_tbf.c

sch_tbf: update backlog as well

2016-06-03 19:24:04 -04:00

sch_teql.c

net: sched: fix skb->protocol use in case of accelerated vlan path

2015-01-13 17:51:08 -05:00