[dpdk-dev] [PATCH v3] net/mlx5: fix possible NULL deref in Rx path

Bruce Richardson bruce.richardson at intel.com
Mon Sep 19 17:06:11 CEST 2016


On Tue, Aug 02, 2016 at 05:41:21PM +0300, Sagi Grimberg wrote:
> The user is allowed to call ->rx_pkt_burst() even without free
> mbufs in the pool. In this scenario we'll fail allocating a rep mbuf
> on the first iteration (where pkt is still NULL). This would cause us
> to deref a NULL pkt (reset refcount and free).
> 
> Fix this by checking the pkt before freeing it.
> 
> Fixes: a1bdb71a32da ("net/mlx5: fix crash in Rx")
> 
> Signed-off-by: Sagi Grimberg <sagi at grimberg.me>
> Acked-by: Adrien Mazarguil <adrien.mazarguil at 6wind.com>
> ---
Applied to dpdk-next-net/rel_16_11

/Bruce


More information about the dev mailing list