Re: [PATCH net] net: fix use-after-free in GRO with ESP

2018-07-02 Thread David Miller
From: Sabrina Dubroca Date: Sat, 30 Jun 2018 17:38:55 +0200 > Since the addition of GRO for ESP, gro_receive can consume the skb and > return -EINPROGRESS. In that case, the lower layer GRO handler cannot > touch the skb anymore. > > Commit 5f114163f2f5 ("net: Add a skb_gro_flush_final helper.")

[PATCH net] net: fix use-after-free in GRO with ESP

2018-06-30 Thread Sabrina Dubroca
Since the addition of GRO for ESP, gro_receive can consume the skb and return -EINPROGRESS. In that case, the lower layer GRO handler cannot touch the skb anymore. Commit 5f114163f2f5 ("net: Add a skb_gro_flush_final helper.") converted some of the gro_receive handlers that can lead to ESP's gro_r