| commit | 9f17dbf04ddf55ae48f5bbafea4c4920ea943215 | [log] [tgz] |
|---|---|---|
| author | Edward Cree <ecree@solarflare.com> | Mon Jul 09 18:10:02 2018 +0100 |
| committer | David S. Miller <davem@davemloft.net> | Mon Jul 09 14:55:53 2018 -0700 |
| tree | 0e2468ae6bb598bdba17d3679d74c9b00a8034b6 | |
| parent | 8c057efaebb557b60ba514b5e39e8000a1eab0f1 [diff] |
netfilter: fix use-after-free in NF_HOOK_LIST
nf_hook() can free the skb, so we need to remove it from the list before
calling, and add passed skbs to a sublist afterwards.
Fixes: 17266ee93984 ("net: ipv4: listified version of ip_rcv")
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Edward Cree <ecree@solarflare.com>
Signed-off-by: David S. Miller <davem@davemloft.net>