1
0
Files
linux/drivers/net
Mariusz Kozlowski 3c8a9c63d5 tun/tap: Fix crashes if open() /dev/net/tun and then poll() it.
Fix NULL pointer dereference in tun_chr_pool() introduced by commit
33dccbb050 ("tun: Limit amount of queued
packets per device") and triggered by this code:

	int fd;
	struct pollfd pfd;
	fd = open("/dev/net/tun", O_RDWR);
	pfd.fd = fd;
	pfd.events = POLLIN | POLLOUT;
	poll(&pfd, 1, 0);

Reported-by: Eugene Kapun <abacabadabacaba@gmail.com>
Signed-off-by: Mariusz Kozlowski <m.kozlowski@tuxland.pl>
Signed-off-by: David S. Miller <davem@davemloft.net>
2009-07-06 12:47:07 -07:00
..
2009-06-11 17:23:24 -07:00
2009-06-13 23:29:04 -07:00
2009-06-11 02:47:13 -07:00
2009-04-28 02:05:21 -07:00
2009-06-08 00:21:48 -07:00
2009-07-05 18:03:27 -07:00
2009-07-03 19:10:51 -07:00
2009-06-30 19:46:48 -07:00
2009-05-26 20:35:02 -07:00
2009-05-26 20:35:02 -07:00
2009-05-26 20:35:02 -07:00
2009-05-26 20:35:03 -07:00
2009-04-24 04:45:33 -07:00
2009-05-17 11:59:51 -07:00
2009-05-29 01:46:27 -07:00
2009-06-21 11:00:33 -05:00
2009-05-29 01:46:27 -07:00
2009-07-05 18:03:33 -07:00
2009-05-17 15:19:36 -07:00
2009-06-11 17:23:24 -07:00
2009-05-29 01:46:27 -07:00
2009-05-29 01:51:22 -07:00
2009-06-08 00:20:20 -07:00
2009-06-25 20:06:34 -07:00
2009-06-18 00:29:08 -07:00
2009-06-22 11:32:24 -07:00
2009-06-22 11:32:24 -07:00
2009-06-03 02:51:04 -07:00
2009-05-27 15:46:53 -07:00
2009-06-19 01:12:52 -07:00
2009-04-29 17:32:34 -07:00
2009-05-25 22:49:56 -07:00
2009-05-29 01:46:27 -07:00
2009-06-26 09:28:42 -07:00
2009-06-17 18:46:54 -07:00
2009-06-08 00:21:48 -07:00
2009-05-29 01:46:27 -07:00