diff options
| author | Willem de Bruijn <[email protected]> | 2019-05-15 17:29:16 +0000 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2019-05-16 19:17:50 +0000 |
| commit | 185ce5c38ea76f29b6bd9c7c8c7a5e5408834920 (patch) | |
| tree | 84ac1b5a0f65276f68bae561519e6568507e58d4 /net/tipc/core.c | |
| parent | net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions (diff) | |
| download | kernel-185ce5c38ea76f29b6bd9c7c8c7a5e5408834920.tar.gz kernel-185ce5c38ea76f29b6bd9c7c8c7a5e5408834920.zip | |
net: test nouarg before dereferencing zerocopy pointers
Zerocopy skbs without completion notification were added for packet
sockets with PACKET_TX_RING user buffers. Those signal completion
through the TP_STATUS_USER bit in the ring. Zerocopy annotation was
added only to avoid premature notification after clone or orphan, by
triggering a copy on these paths for these packets.
The mechanism had to define a special "no-uarg" mode because packet
sockets already use skb_uarg(skb) == skb_shinfo(skb)->destructor_arg
for a different pointer.
Before deferencing skb_uarg(skb), verify that it is a real pointer.
Fixes: 5cd8d46ea1562 ("packet: copy user buffers before orphan or clone")
Signed-off-by: Willem de Bruijn <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'net/tipc/core.c')
0 files changed, 0 insertions, 0 deletions