Re: [ovs-dev] [PATCH net-next] openvswitch: use after free in __ovs_ct_free_action()

2019-04-02 Thread David Miller
From: Dan Carpenter Date: Tue, 2 Apr 2019 09:53:14 +0300 > We free "ct_info->ct" and then use it on the next line when we pass it > to nf_ct_destroy_timeout(). This patch swaps the order to avoid the use > after free. > > Fixes: 06bd2bdf19d2 ("openvswitch: Add timeout support to ct action") >

Re: [ovs-dev] [PATCH net-next] openvswitch: use after free in __ovs_ct_free_action()

2019-04-02 Thread Yi-Hung Wei
On Mon, Apr 1, 2019 at 11:53 PM Dan Carpenter wrote: > > We free "ct_info->ct" and then use it on the next line when we pass it > to nf_ct_destroy_timeout(). This patch swaps the order to avoid the use > after free. > > Fixes: 06bd2bdf19d2 ("openvswitch: Add timeout support to ct action") >

[ovs-dev] [PATCH net-next] openvswitch: use after free in __ovs_ct_free_action()

2019-04-02 Thread Dan Carpenter
We free "ct_info->ct" and then use it on the next line when we pass it to nf_ct_destroy_timeout(). This patch swaps the order to avoid the use after free. Fixes: 06bd2bdf19d2 ("openvswitch: Add timeout support to ct action") Signed-off-by: Dan Carpenter --- net/openvswitch/conntrack.c | 2 +-