Merge branch 'net_sched-fix-a-UAF-in-tcf_action_init'

Cong Wang says: ==================== net_sched: fix a UAF in tcf_action_init() This patchset fixes a use-after-free triggered by syzbot. Please find more details in each patch description. ==================== Signed-off-by: David S. Miller <davem@davemloft.net>
2026-10-14 05:55:17 +00:00 · 2020-09-24 19:46:21 -07:00 · 2020-09-24 19:46:21 -07:00 · 6d8899962a
commit 6d8899962a
parent 7241c5a697 0fedc63fad
22 changed files with 35 additions and 66 deletions
--- a/include/net/act_api.h
+++ b/include/net/act_api.h
--- a/net/sched/act_api.c
+++ b/net/sched/act_api.c
--- a/net/sched/act_bpf.c
+++ b/net/sched/act_bpf.c
--- a/net/sched/act_connmark.c
+++ b/net/sched/act_connmark.c
--- a/net/sched/act_csum.c
+++ b/net/sched/act_csum.c
--- a/net/sched/act_ct.c
+++ b/net/sched/act_ct.c
--- a/net/sched/act_ctinfo.c
+++ b/net/sched/act_ctinfo.c
--- a/net/sched/act_gact.c
+++ b/net/sched/act_gact.c
--- a/net/sched/act_gate.c
+++ b/net/sched/act_gate.c
--- a/net/sched/act_ife.c
+++ b/net/sched/act_ife.c
--- a/net/sched/act_ipt.c
+++ b/net/sched/act_ipt.c
--- a/net/sched/act_mirred.c
+++ b/net/sched/act_mirred.c
--- a/net/sched/act_mpls.c
+++ b/net/sched/act_mpls.c
--- a/net/sched/act_nat.c
+++ b/net/sched/act_nat.c
--- a/net/sched/act_pedit.c
+++ b/net/sched/act_pedit.c
--- a/net/sched/act_police.c
+++ b/net/sched/act_police.c
--- a/net/sched/act_sample.c
+++ b/net/sched/act_sample.c
--- a/net/sched/act_simple.c
+++ b/net/sched/act_simple.c
--- a/net/sched/act_skbedit.c
+++ b/net/sched/act_skbedit.c
--- a/net/sched/act_skbmod.c
+++ b/net/sched/act_skbmod.c
--- a/net/sched/act_tunnel_key.c
+++ b/net/sched/act_tunnel_key.c
--- a/net/sched/act_vlan.c
+++ b/net/sched/act_vlan.c