ila: Fix rhashtable walker list corruption
authorHerbert Xu <herbert@gondor.apana.org.au>
Tue, 26 Mar 2019 05:50:14 +0000 (13:50 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 3 Apr 2019 04:26:18 +0000 (06:26 +0200)
commit7254ad094f4a7d624d988d3095e6cb94f3e9afe6
treefc357fc5ac999ef4945cccd78e24fd07be38a8af
parent979f8a675d3b8f28c80ec23c4e9406ce30464c8e
ila: Fix rhashtable walker list corruption

[ Upstream commit b5f9bd15b88563b55a99ed588416881367a0ce5f ]

ila_xlat_nl_cmd_flush uses rhashtable walkers allocated from the
stack but it never frees them.  This corrupts the walker list of
the hash table.

This patch fixes it.

Reported-by: syzbot+dae72a112334aa65a159@syzkaller.appspotmail.com
Fixes: b6e71bdebb12 ("ila: Flush netlink command to clear xlat...")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/ipv6/ila/ila_xlat.c