Files
linux/include
Willem de Bruijn 3620e546b1 net: test nouarg before dereferencing zerocopy pointers
[ Upstream commit 185ce5c38e ]

Zerocopy skbs without completion notification were added for packet
sockets with PACKET_TX_RING user buffers. Those signal completion
through the TP_STATUS_USER bit in the ring. Zerocopy annotation was
added only to avoid premature notification after clone or orphan, by
triggering a copy on these paths for these packets.

The mechanism had to define a special "no-uarg" mode because packet
sockets already use skb_uarg(skb) == skb_shinfo(skb)->destructor_arg
for a different pointer.

Before deferencing skb_uarg(skb), verify that it is a real pointer.

Fixes: 5cd8d46ea1 ("packet: copy user buffers before orphan or clone")
Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-05-25 18:23:20 +02:00
..
2018-08-14 23:49:13 +02:00
2018-11-13 11:08:46 -08:00
2019-05-25 18:23:18 +02:00
2018-11-13 11:08:43 -08:00
2019-02-27 10:09:03 +01:00