netem: fix possible NULL deref in netem_dequeue()
authorEric Dumazet <edumazet@google.com>
Wed, 3 Jul 2013 21:04:14 +0000 (14:04 -0700)
committerDavid S. Miller <davem@davemloft.net>
Wed, 3 Jul 2013 23:52:10 +0000 (16:52 -0700)
commit36b7bfe09b6deb71bf387852465245783c9a6208
tree19b913e5a43e3010c8c8790c7aa87d0d5167dea1
parent9eb5bf838d06aa6ddebe4aca6b5cedcf2eb53b86
netem: fix possible NULL deref in netem_dequeue()

commit aec0a40a6f7884 ("netem: use rb tree to implement the time queue")
added a regression if a child qdisc is attached to netem, as we perform
a NULL dereference.

Fix this by adding a temporary variable to cache
netem_skb_cb(skb)->time_to_send.

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/sched/sch_netem.c