于 2012年07月10日 05:51, David Miller 写道: > From: Gao feng <gaof...@cn.fujitsu.com> > Date: Mon, 09 Jul 2012 16:15:29 +0800 > >> 于 2012年07月09日 15:45, Eric Dumazet 写道: >>> From: Eric Dumazet <eduma...@google.com> >>> >>> dev->priomap is allocated by extend_netdev_table() called from >>> update_netdev_tables(). >>> And this is only called if write_priomap() is called. >>> >>> But if write_priomap() is not called, it seems we can have out of bounds >>> accesses in cgrp_destroy(), read_priomap() & skb_update_prio() >>> >>> With help from Gao Feng >>> >>> Signed-off-by: Eric Dumazet <eduma...@google.com> >>> Cc: Neil Horman <nhor...@tuxdriver.com> >>> Cc: Gao feng <gaof...@cn.fujitsu.com> >>> --- >>> net/core/dev.c | 8 ++++++-- >>> net/core/netprio_cgroup.c | 4 ++-- >>> 2 files changed, 8 insertions(+), 4 deletions(-) >> >> Acked-by: Gao feng <gaof...@cn.fujitsu.com> > > Applied. >
Hi David Please see my patch in this thread, I think it's a better way to fix this bug. Thanks. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/