diff options
| author | Eric Dumazet <edumazet@google.com> | 2017-03-23 12:39:21 -0700 |
|---|---|---|
| committer | Mister Oyster <oysterized@gmail.com> | 2017-07-04 12:11:25 +0200 |
| commit | 8a6c6b91225a55d0d6f2c8345682f40184cf6aeb (patch) | |
| tree | 65627879e3f4804ba4f86acdf6d6f68cf1d09cb6 /scripts/const_structs.checkpatch | |
| parent | 814ba889fd64fd1eb7c2a0a4bed33ee075c8b54a (diff) | |
net: neigh: guard against NULL solicit() method
commit 48481c8fa16410ffa45939b13b6c53c2ca609e5f upstream.
Dmitry posted a nice reproducer of a bug triggering in neigh_probe()
when dereferencing a NULL neigh->ops->solicit method.
This can happen for arp_direct_ops/ndisc_direct_ops and similar,
which can be used for NUD_NOARP neighbours (created when dev->header_ops
is NULL). Admin can then force changing nud_state to some other state
that would fire neigh timer.
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Willy Tarreau <w@1wt.eu>
Diffstat (limited to 'scripts/const_structs.checkpatch')
0 files changed, 0 insertions, 0 deletions