diff options
| author | David Vrabel <david.vrabel@citrix.com> | 2015-05-27 15:46:10 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2015-05-27 14:02:28 -0400 |
| commit | ad0681185770716523c81b156c44b9804d7b8ed2 (patch) | |
| tree | f2519cc3625d8d327a5e4eb8e7ca15ed4fd83274 /mm/fadvise.c | |
| parent | f4ecf29fd78d19a9301e638eaa1419e5c8fbdce1 (diff) | |
| download | linux-stable-ad0681185770716523c81b156c44b9804d7b8ed2.tar.gz linux-stable-ad0681185770716523c81b156c44b9804d7b8ed2.tar.bz2 linux-stable-ad0681185770716523c81b156c44b9804d7b8ed2.zip | |
xen-netfront: properly destroy queues when removing device
xennet_remove() freed the queues before freeing the netdevice which
results in a use-after-free when free_netdev() tries to delete the
napi instances that have already been freed.
Fix this by fully destroy the queues (which includes deleting the napi
instances) before freeing the netdevice.
Signed-off-by: David Vrabel <david.vrabel@citrix.com>
Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'mm/fadvise.c')
0 files changed, 0 insertions, 0 deletions