summaryrefslogtreecommitdiffstats
path: root/net
diff options
context:
space:
mode:
authorPatrick McHardy <kaber@trash.net>2007-07-18 01:55:52 -0700
committerDavid S. Miller <davem@davemloft.net>2007-07-18 01:55:52 -0700
commitbd0bf0765ea1fba80d7085e1f0375ec045631dc1 (patch)
tree7a637d217e6f090f3eebe127a11fcbfaabc1c3cd /net
parent16751347a060a10c09b11593bb179fd5b0240c04 (diff)
downloadlinux-bd0bf0765ea1fba80d7085e1f0375ec045631dc1.tar.gz
linux-bd0bf0765ea1fba80d7085e1f0375ec045631dc1.tar.bz2
linux-bd0bf0765ea1fba80d7085e1f0375ec045631dc1.zip
[XFRM]: Fix crash introduced by struct dst_entry reordering
XFRM expects xfrm_dst->u.next to be same pointer as dst->next, which was broken by the dst_entry reordering in commit 1e19e02c~, causing an oops in xfrm_bundle_ok when walking the bundle upwards. Kill xfrm_dst->u.next and change the only user to use dst->next instead. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
-rw-r--r--net/xfrm/xfrm_policy.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c
index 157bfbd250ba..b48f06fc9fd9 100644
--- a/net/xfrm/xfrm_policy.c
+++ b/net/xfrm/xfrm_policy.c
@@ -2141,7 +2141,7 @@ int xfrm_bundle_ok(struct xfrm_policy *pol, struct xfrm_dst *first,
if (last == first)
break;
- last = last->u.next;
+ last = (struct xfrm_dst *)last->u.dst.next;
last->child_mtu_cached = mtu;
}