From: Jiri Pirko <j...@resnulli.us>
Date: Tue, 17 May 2016 18:58:08 +0200
> From: Jiri Pirko <j...@mellanox.com>
>
> The problem is that fib_info->nh is [0] so the struct fib_info
> allocation size depends on number of nexthops. If we just copy fib_info,
> we do not copy the nexthops info and driver accesses memory which is not
> ours.
Oops.
> Given the fact that fib4 does not defer operations and therefore it does
> not need copy, just pass the pointer down to drivers as it was done
> before.
>
> Fixes: 850d0cbc91 ("switchdev: remove pointers from switchdev objects")
> Signed-off-by: Jiri Pirko <j...@mellanox.com>
Applied and queued up for -stable, thanks Jiri.
