net/mlx5: Fix use-after-free
_rule_ is being freed and then dereferenced by accessing rule->ctx
Fix this by copying the value returned by PTR_ERR(rule->ctx) into a local
variable for its safe use after freeing _rule_
Addresses-Coverity-ID: 1466041 ("Read from pointer after free")
Fixes: 05564d0ae0
("net/mlx5: Add flow-steering commands for FPGA IPSec implementation")
Reviewed-by: Yuval Shaia <yuval.shaia@oracle.com>
Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>
Acked-by: Saeed Mahameed <saeedm@mellanox.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Родитель
f145749dd4
Коммит
594619497f
|
@ -1061,8 +1061,9 @@ static int fpga_ipsec_fs_create_fte(struct mlx5_core_dev *dev,
|
|||
|
||||
rule->ctx = mlx5_fpga_ipsec_fs_create_sa_ctx(dev, fte, is_egress);
|
||||
if (IS_ERR(rule->ctx)) {
|
||||
int err = PTR_ERR(rule->ctx);
|
||||
kfree(rule);
|
||||
return PTR_ERR(rule->ctx);
|
||||
return err;
|
||||
}
|
||||
|
||||
rule->fte = fte;
|
||||
|
|
Загрузка…
Ссылка в новой задаче