[PATCH 16/16] virtio_net: fix use after free on allocation failure

Cornelia Huck
2014-10-06T14:17:28Z

On Sun, 5 Oct 2014 19:07:38 +0300
"Michael S. Tsirkin" <mst at redhat.com> wrote:

> In the extremely unlikely event that driver initialization fails after
> RX buffers are added, virtio net frees RX buffers while VQs are
> still active, potentially causing device to use a freed buffer.
>
> To fix, reset device first - same as we do on device removal.
>
> Signed-off-by: Michael S. Tsirkin <mst at redhat.com>
> ---
>  drivers/net/virtio_net.c | 2 ++
>  1 file changed, 2 insertions(+)

Reviewed-by: Cornelia Huck <cornelia.huck at de.ibm.com>