netvsc: fix use-after-free in netvsc_change_mtu()
authorDexuan Cui <decui@microsoft.com>
Thu, 2 Mar 2017 13:00:53 +0000 (13:00 +0000)
committerDavid S. Miller <davem@davemloft.net>
Thu, 2 Mar 2017 22:41:36 +0000 (14:41 -0800)
commit152669bd3cd2407d6f556009b95ee249c0c1a462
treedc032a0eb328b1d4e81224a2d640c67543221201
parent35576ee17f7c15a5ec776570088fd2eff1dbdc2d
netvsc: fix use-after-free in netvsc_change_mtu()

'nvdev' is freed in rndis_filter_device_remove -> netvsc_device_remove ->
free_netvsc_device, so we mustn't access it, before it's re-created in
rndis_filter_device_add -> netvsc_device_add.

Signed-off-by: Dexuan Cui <decui@microsoft.com>
Cc: "K. Y. Srinivasan" <kys@microsoft.com>
Cc: Haiyang Zhang <haiyangz@microsoft.com>
Cc: Stephen Hemminger <sthemmin@microsoft.com>
Reviewed-by: Stephen Hemminger <sthemmin@microsoft.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/hyperv/netvsc_drv.c