diff options
| author | Cong Wang <xiyou.wangcong@gmail.com> | 2018-01-09 13:40:41 -0800 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2018-01-10 15:31:07 -0500 |
| commit | 78bbb15f2239bc8e663aa20bbe1987c91a0b75f6 (patch) | |
| tree | 3ec70d00ed6f9afcbe11b0ca67bae4bb5656ebf0 /net/8021q/vlan.c | |
| parent | 6ade262b77f4285f7ba9216d5831093d7766304a (diff) | |
| download | linux-78bbb15f2239bc8e663aa20bbe1987c91a0b75f6.tar.gz linux-78bbb15f2239bc8e663aa20bbe1987c91a0b75f6.tar.bz2 linux-78bbb15f2239bc8e663aa20bbe1987c91a0b75f6.zip | |
8021q: fix a memory leak for VLAN 0 device
A vlan device with vid 0 is allow to creat by not able to be fully
cleaned up by unregister_vlan_dev() which checks for vlan_id!=0.
Also, VLAN 0 is probably not a valid number and it is kinda
"reserved" for HW accelerating devices, but it is probably too
late to reject it from creation even if makes sense. Instead,
just remove the check in unregister_vlan_dev().
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Fixes: ad1afb003939 ("vlan_dev: VLAN 0 should be treated as "no vlan tag" (802.1p packet)")
Cc: Vlad Yasevich <vyasevich@gmail.com>
Cc: Ben Hutchings <ben.hutchings@codethink.co.uk>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/8021q/vlan.c')
| -rw-r--r-- | net/8021q/vlan.c | 7 |
1 files changed, 1 insertions, 6 deletions
diff --git a/net/8021q/vlan.c b/net/8021q/vlan.c index 8dfdd94e430f..bad01b14a4ad 100644 --- a/net/8021q/vlan.c +++ b/net/8021q/vlan.c @@ -111,12 +111,7 @@ void unregister_vlan_dev(struct net_device *dev, struct list_head *head) vlan_gvrp_uninit_applicant(real_dev); } - /* Take it out of our own structures, but be sure to interlock with - * HW accelerating devices or SW vlan input packet processing if - * VLAN is not 0 (leave it there for 802.1p). - */ - if (vlan_id) - vlan_vid_del(real_dev, vlan->vlan_proto, vlan_id); + vlan_vid_del(real_dev, vlan->vlan_proto, vlan_id); /* Get rid of the vlan's reference to real_dev */ dev_put(real_dev); |