diff options
| author | Jia-Ju Bai <baijiaju1990@gmail.com> | 2019-07-29 16:24:33 +0800 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2019-07-29 09:46:58 -0700 |
| commit | 051c7b39be4a91f6b7d8c4548444e4b850f1f56c (patch) | |
| tree | 927038e9f4382bc96ab6588eae8294e4c91220d9 /block | |
| parent | a7f9cbf0ed2f67380b547971145e823b9225d39d (diff) | |
| download | linux-051c7b39be4a91f6b7d8c4548444e4b850f1f56c.tar.bz2 | |
net: sched: Fix a possible null-pointer dereference in dequeue_func()
In dequeue_func(), there is an if statement on line 74 to check whether
skb is NULL:
if (skb)
When skb is NULL, it is used on line 77:
prefetch(&skb->end);
Thus, a possible null-pointer dereference may occur.
To fix this bug, skb->end is used when skb is not NULL.
This bug is found by a static analysis tool STCheck written by us.
Fixes: 76e3cc126bb2 ("codel: Controlled Delay AQM")
Signed-off-by: Jia-Ju Bai <baijiaju1990@gmail.com>
Reviewed-by: Jiri Pirko <jiri@mellanox.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'block')
0 files changed, 0 insertions, 0 deletions