OSDN Git Service

macvlan: Fix device ref leak when purging bc_queue
authorHerbert Xu <herbert@gondor.apana.org.au>
Thu, 20 Apr 2017 12:55:12 +0000 (20:55 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 3 May 2017 15:36:37 +0000 (08:36 -0700)
commitae88c43c019f5f6f5390e42e62fbc762c52bbe9b
tree309f03bc2cab3877433c6959c30c798b66a9d5ad
parent7bf657201c211fde8002a82c6c0d7f0b3082fb97
macvlan: Fix device ref leak when purging bc_queue

[ Upstream commit f6478218e6edc2a587b8f132f66373baa7b2497c ]

When a parent macvlan device is destroyed we end up purging its
broadcast queue without dropping the device reference count on
the packet source device.  This causes the source device to linger.

This patch drops that reference count.

Fixes: 260916dfb48c ("macvlan: Fix potential use-after free for...")
Reported-by: Joe Ghalam <Joe.Ghalam@dell.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/macvlan.c