please consider for 2.6.18 -- thanks! [ATM]: potential NULL pointer dereference in clip_mkip()
http://article.gmane.org/gmane.linux.kernel/445717 When re-processing received data, a struct sk_buff pointer skb may be dereferenced after a free operation. From: Frederik Deweerdt <[EMAIL PROTECTED]> Signed-off-by: Chas Williams <[EMAIL PROTECTED]> --- commit 87409562aeed5fb2b85dc2f9bddca0a1bbde8c37 tree 0885b8bd2b8881201de422877abd8979861c44de parent fc6b6284e9383bd8d9fd95210fbc5e3c54ccc65d author chas williams - CONTRACTOR <[EMAIL PROTECTED]> Sat, 16 Sep 2006 15:55:01 -0400 committer chas williams - CONTRACTOR <[EMAIL PROTECTED]> Sat, 16 Sep 2006 15:55:01 -0400 net/atm/clip.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/net/atm/clip.c b/net/atm/clip.c index 7ce7bfe..0dfa3a4 100644 --- a/net/atm/clip.c +++ b/net/atm/clip.c @@ -500,9 +500,9 @@ static int clip_mkip(struct atm_vcc *vcc } else { unsigned int len = skb->len; - clip_push(vcc, skb); PRIV(skb->dev)->stats.rx_packets--; PRIV(skb->dev)->stats.rx_bytes -= len; + clip_push(vcc, skb); } return 0; } - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
