diff options
| author | Eric Dumazet <[email protected]> | 2015-03-11 18:42:02 -0700 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2015-03-11 23:51:18 -0400 |
| commit | c29390c6dfeee0944ac6b5610ebbe403944378fc (patch) | |
| tree | befe951b043be948957abb1db65cee36dd7a379b /scripts/gcc-plugins | |
| parent | c8a4d29988edb0db9ee80669f2e5e21bd9f7e0d0 (diff) | |
xps: must clear sender_cpu before forwarding
John reported that my previous commit added a regression
on his router.
This is because sender_cpu & napi_id share a common location,
so get_xps_queue() can see garbage and perform an out of bound access.
We need to make sure sender_cpu is cleared before doing the transmit,
otherwise any NIC busy poll enabled (skb_mark_napi_id()) can trigger
this bug.
Signed-off-by: Eric Dumazet <[email protected]>
Reported-by: John <[email protected]>
Bisected-by: John <[email protected]>
Fixes: 2bd82484bb4c ("xps: fix xps for stacked devices")
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'scripts/gcc-plugins')
0 files changed, 0 insertions, 0 deletions