diff options
| author | Girish Moodalbail <girish.moodalbail@oracle.com> | 2017-11-17 10:16:17 +0300 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2017-11-18 04:37:00 +0300 |
| commit | fe18da60500b8b8aa2621fb1de7132cb1f0aebcf (patch) | |
| tree | da29d087913ef4c822a8003aa0415b8bac1f5d11 /include/uapi/linux/loop.h | |
| parent | cebe84c6190d741045a322f5343f717139993c08 (diff) | |
| download | linux-fe18da60500b8b8aa2621fb1de7132cb1f0aebcf.tar.xz | |
ipvlan: NULL pointer dereference panic in ipvlan_port_destroy
When call to register_netdevice() (called from ipvlan_link_new()) fails,
we call ipvlan_uninit() (through ndo_uninit()) to destroy the ipvlan
port. After returning unsuccessfully from register_netdevice() we go
ahead and call ipvlan_port_destroy() again which causes NULL pointer
dereference panic. Fix the issue by making ipvlan_init() and
ipvlan_uninit() call symmetric.
The ipvlan port will now be created inside ipvlan_init() and will be
destroyed in ipvlan_uninit().
Fixes: 2ad7bf363841 (ipvlan: Initial check-in of the IPVLAN driver)
Signed-off-by: Girish Moodalbail <girish.moodalbail@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/uapi/linux/loop.h')
0 files changed, 0 insertions, 0 deletions