The annotated tag, batman-adv-fix-for-davem has been updated to fa9554905e3c6db1e10ec8525e8bdd61dc0e078b (tag) from 45883a313c8beceb04b8d9e9f277101beee0448f (which is now obsolete) tagging 6b892c1cb0805acee5d4ddd9e7878ed076c1b7c7 (commit) replaces v4.6-rc7 tagged by Antonio Quartulli on Sun May 15 22:48:37 2016 +0800
- Shortlog ------------------------------------------------------------ During the Wireless Battle Mesh v9 in Porto (PT) at the beginning of May, we manage to uncover and fix some important bugs in our new B.A.T.M.A.N. V algorithm. These are the most critical fixes we came up with: - avoid potential crash due to NULL pointer dereference in B.A.T.M.A.N. V routine when a neigh_ifinfo object is not found, by Sven Eckelmann - avoid crash due to double kref_put on neigh_node object in B.A.T.M.A.N. V routine leading to use-after-free, by Sven Eckelmann (this crash can be always replicated) - avoid use-after-free of skb when counting outgoing bytes, by Florian Westphal - fix neigh_ifinfo object reference counting imbalance when using B.A.T.M.A.N. V, by Sven Eckelmann. Such imbalance may lead to the impossibility of releasing the related netdev object on shutdown.
Florian Westphal (1): batman-adv: fix skb deref after free
Sven Eckelmann (3): batman-adv: Avoid nullptr derefence in batadv_v_neigh_is_sob batman-adv: Fix double neigh_node_put in batadv_v_ogm_route_update batman-adv: Fix refcnt leak in batadv_v_neigh_*
-----------------------------------------------------------------------