diff options
| author | Patrick McHardy <kaber@trash.net> | 2007-04-03 04:03:55 +0200 |
|---|---|---|
| committer | Adrian Bunk <bunk@stusta.de> | 2007-04-03 04:03:55 +0200 |
| commit | 5f4a9d1b7a413d6aac382c51692ac0df785068c5 (patch) | |
| tree | 51067f1b0f341dcebc79e5c17e88d45189e613ee /net/core/skbuff.c | |
| parent | cceec5186fce242e095dc5e9496841df5d4133b9 (diff) | |
[IFB]: Fix crash on input device removal
The input_device pointer is not refcounted, which means the device may
disappear while packets are queued, causing a crash when ifb passes packets
with a stale skb->dev pointer to netif_rx().
Fix by storing the interface index instead and do a lookup where neccessary.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Diffstat (limited to 'net/core/skbuff.c')
| -rw-r--r-- | net/core/skbuff.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/core/skbuff.c b/net/core/skbuff.c index 890512eb66ce..41b737637a76 100644 --- a/net/core/skbuff.c +++ b/net/core/skbuff.c @@ -443,7 +443,7 @@ struct sk_buff *skb_clone(struct sk_buff *skb, gfp_t gfp_mask) n->tc_verd = SET_TC_VERD(skb->tc_verd,0); n->tc_verd = CLR_TC_OK2MUNGE(n->tc_verd); n->tc_verd = CLR_TC_MUNGED(n->tc_verd); - C(input_dev); + C(iif); #endif #endif |