Paolo Abeni <pab...@redhat.com> wrote: > On cow we can free the old extension: we must avoid dereferencing > such extension after skb_ext_maybe_cow(). Since 'new' contents > are always equal to 'old' after the copy, we can fix the above > accessing the relevant data using 'new'.
Yep, this is indeed possible when two clones of same skb have skb_ext_add() invoked at the same time from two different context. Thanks for spotting this. Acked-by: Florian Westphal <f...@strlen.de>
