netem: fix a use after free
authorEric Dumazet <edumazet@google.com>
Mon, 20 Jun 2016 22:00:43 +0000 (15:00 -0700)
committerDavid S. Miller <davem@davemloft.net>
Thu, 23 Jun 2016 19:07:44 +0000 (15:07 -0400)
commit21de12ee5568fd1aec47890c72967abf791ac80a
treeb9bd4619c5053275f78ec107d29ea38272d6cdd0
parent817e9f2c5c262b2716f5d77020d118ad53315f3e
netem: fix a use after free

If the packet was dropped by lower qdisc, then we must not
access it later.

Save qdisc_pkt_len(skb) in a temp variable.

Fixes: 2ccccf5fb43f ("net_sched: update hierarchical backlog too")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: WANG Cong <xiyou.wangcong@gmail.com>
Cc: Jamal Hadi Salim <jhs@mojatatu.com>
Cc: Stephen Hemminger <stephen@networkplumber.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/sched/sch_netem.c