Fri, Jul 17, 2015 at 10:38:44PM CEST, [email protected] wrote: >The following test case causes a NULL pointer dereference in cls_flower: > > tc filter add dev foo parent 1: flower eth_type ipv4 action ok flowid 1:1 > tc filter replace dev foo parent 1: pref 49152 handle 0x1 \ > flower eth_type ipv6 action ok flowid 1:1 > >The problem is that commit 77b9900ef53a ("tc: introduce Flower classifier") >accidentally swapped the arguments of list_replace_rcu(), the old >element needs to be the first argument and the new element the second. > >Fixes: 77b9900ef53a ("tc: introduce Flower classifier") >Signed-off-by: Daniel Borkmann <[email protected]>
Acked-by: Jiri Pirko <[email protected]> -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
