The annotated tag, batman-adv-fix-for-davem has been updated
to fa9554905e3c6db1e10ec8525e8bdd61dc0e078b (tag)
from 45883a313c8beceb04b8d9e9f277101beee0448f (which is now obsolete)
tagging 6b892c1cb0805acee5d4ddd9e7878ed076c1b7c7 (commit)
replaces v4.6-rc7
tagged by Antonio Quartulli
on Sun May 15 22:48:37 2016 +0800
- Shortlog ------------------------------------------------------------
During the Wireless Battle Mesh v9 in Porto (PT) at the beginning of
May, we manage to uncover and fix some important bugs in our
new B.A.T.M.A.N. V algorithm. These are the most critical fixes we
came up with:
- avoid potential crash due to NULL pointer dereference in
B.A.T.M.A.N. V routine when a neigh_ifinfo object is not found, by
Sven Eckelmann
- avoid crash due to double kref_put on neigh_node object in
B.A.T.M.A.N. V routine leading to use-after-free, by Sven
Eckelmann (this crash can be always replicated)
- avoid use-after-free of skb when counting outgoing bytes, by Florian
Westphal
- fix neigh_ifinfo object reference counting imbalance when using
B.A.T.M.A.N. V, by Sven Eckelmann. Such imbalance may lead to the
impossibility of releasing the related netdev object on shutdown.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=oNMJ
-----END PGP SIGNATURE-----
Florian Westphal (1):
batman-adv: fix skb deref after free
Sven Eckelmann (3):
batman-adv: Avoid nullptr derefence in batadv_v_neigh_is_sob
batman-adv: Fix double neigh_node_put in batadv_v_ogm_route_update
batman-adv: Fix refcnt leak in batadv_v_neigh_*
-----------------------------------------------------------------------
--
linux integration