Eric Dumazet 2a1e5e4ab6 phonet: properly unshare skbs in phonet_rcv() ... [ Upstream commit 7aaed57c5c ] Ivaylo Dimitrov reported a regression caused by commit 7866a62104 ("dev: add per net_device packet type chains"). skb->dev becomes NULL and we crash in __netif_receive_skb_core(). Before above commit, different kind of bugs or corruptions could happen without major crash. But the root cause is that phonet_rcv() can queue skb without checking if skb is shared or not. Many thanks to Ivaylo Dimitrov for his help, diagnosis and tests. Reported-by: Ivaylo Dimitrov <ivo.g.dimitrov.75@gmail.com> Tested-by: Ivaylo Dimitrov <ivo.g.dimitrov.75@gmail.com> Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Remi Denis-Courmont <courmisch@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2016-01-31 11:23:36 -08:00
..
Kconfig	Phonet: kill the ST-Ericsson pipe controller Kconfig	2011-03-09 11:59:33 -08:00
Makefile	Net: phonet: Makefile: Remove deprecated kbuild goal definitions	2010-11-22 08:16:14 -08:00
af_phonet.c	phonet: properly unshare skbs in phonet_rcv()	2016-01-31 11:23:36 -08:00
datagram.c	net: Remove iocb argument from sendmsg and recvmsg	2015-03-02 13:06:31 -05:00
pep-gprs.c	net: Convert LIMIT_NETDEBUG to net_dbg_ratelimited	2014-11-11 14:10:31 -05:00
pep.c	net: Remove iocb argument from sendmsg and recvmsg	2015-03-02 13:06:31 -05:00
pn_dev.c	net: fix rcu access on phonet_routes	2014-10-06 18:16:30 -04:00
pn_netlink.c	phonet netlink: allow multiple messages per skb in route dump	2015-01-19 16:20:17 -05:00
socket.c	net: Remove iocb argument from sendmsg and recvmsg	2015-03-02 13:06:31 -05:00
sysctl.c	net: Convert uses of typedef ctl_table to struct ctl_table	2013-06-13 02:36:09 -07:00