diff options
| author | Pau Koning <paukoning@gmail.com> | 2013-02-12 01:18:45 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2013-02-13 19:35:24 +0100 |
| commit | 816cd5b83e4d8f3c8106966e64a025408caee3f6 (patch) | |
| tree | 3d784959629752b71d77e4504472189f8972d9cb /net/batman-adv/send.c | |
| parent | net/macb: fix race with RX interrupt while doing NAPI (diff) | |
| download | linux-816cd5b83e4d8f3c8106966e64a025408caee3f6.tar.xz linux-816cd5b83e4d8f3c8106966e64a025408caee3f6.zip | |
batman-adv: Fix NULL pointer dereference in DAT hash collision avoidance
An entry in DAT with the hashed position of 0 can cause a NULL pointer
dereference when the first entry is checked by batadv_choose_next_candidate.
This first candidate automatically has the max value of 0 and the max_orig_node
of NULL. Not checking max_orig_node for NULL in batadv_is_orig_node_eligible
will lead to a NULL pointer dereference when checking for the lowest address.
This problem was added in 785ea1144182c341b8b85b0f8180291839d176a8
("batman-adv: Distributed ARP Table - create DHT helper functions").
Signed-off-by: Pau Koning <paukoning@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/batman-adv/send.c')
0 files changed, 0 insertions, 0 deletions