tree 927038e9f4382bc96ab6588eae8294e4c91220d9
parent a7f9cbf0ed2f67380b547971145e823b9225d39d
author Jia-Ju Bai <baijiaju1990@gmail.com> 1564388673 +0800
committer David S. Miller <davem@davemloft.net> 1564418818 -0700

net: sched: Fix a possible null-pointer dereference in dequeue_func()

In dequeue_func(), there is an if statement on line 74 to check whether
skb is NULL:
    if (skb)

When skb is NULL, it is used on line 77:
    prefetch(&skb->end);

Thus, a possible null-pointer dereference may occur.

To fix this bug, skb->end is used when skb is not NULL.

This bug is found by a static analysis tool STCheck written by us.

Fixes: 76e3cc126bb2 ("codel: Controlled Delay AQM")
Signed-off-by: Jia-Ju Bai <baijiaju1990@gmail.com>
Reviewed-by: Jiri Pirko <jiri@mellanox.com>
Signed-off-by: David S. Miller <davem@davemloft.net>