Files
android_kernel_xiaomi_sm8450/drivers
Mariusz Kozlowski 3c8a9c63d5 tun/tap: Fix crashes if open() /dev/net/tun and then poll() it.
Fix NULL pointer dereference in tun_chr_pool() introduced by commit
33dccbb050 ("tun: Limit amount of queued
packets per device") and triggered by this code:

	int fd;
	struct pollfd pfd;
	fd = open("/dev/net/tun", O_RDWR);
	pfd.fd = fd;
	pfd.events = POLLIN | POLLOUT;
	poll(&pfd, 1, 0);

Reported-by: Eugene Kapun <abacabadabacaba@gmail.com>
Signed-off-by: Mariusz Kozlowski <m.kozlowski@tuxland.pl>
Signed-off-by: David S. Miller <davem@davemloft.net>
2009-07-06 12:47:07 -07:00
..
2009-06-23 01:54:30 -04:00
2009-06-16 19:50:13 -07:00
2009-06-18 09:56:20 +02:00
2009-06-16 19:50:13 -07:00
2009-06-17 09:35:24 -07:00
2009-06-16 19:50:13 -07:00
2009-06-21 22:48:03 -07:00
2009-07-02 13:16:46 -07:00
2009-06-22 10:12:37 +01:00
2009-06-20 18:39:43 +00:00
2009-06-18 13:04:04 -07:00
2009-06-22 16:56:22 -07:00
2009-06-16 19:50:13 -07:00
2009-06-18 13:04:04 -07:00
2009-06-15 16:47:25 +10:00
2009-06-19 16:46:05 -07:00
2009-06-18 13:04:04 -07:00
2009-06-18 13:04:04 -07:00