inet: fix NULL pointer Oops in fib(6)_rule_suppress
authorStefan Tomanek <stefan.tomanek@wertarbyte.de>
Tue, 10 Dec 2013 22:21:25 +0000 (23:21 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 15 Jan 2014 23:31:34 +0000 (15:31 -0800)
commite7556142c6db8a3a748d597a917e84a525c1b15e
tree0aaa7dcedb4a46f47201cccfa0ea4f92f5b7bce7
parent77b0b11532bec875ef6126fe6f7ae07d2f007094
inet: fix NULL pointer Oops in fib(6)_rule_suppress

[ Upstream commit 673498b8ed4c4d4b7221c5309d891c5eac2b7528 ]

This changes ensures that the routing entry investigated by the suppress
function actually does point to a device struct before following that pointer,
fixing a possible kernel oops situation when verifying the interface group
associated with a routing table entry.

According to Daniel Golle, this Oops can be triggered by a user process trying
to establish an outgoing IPv6 connection while having no real IPv6 connectivity
set up (only autoassigned link-local addresses).

Fixes: 6ef94cfafba15 ("fib_rules: add route suppression based on ifgroup")

Reported-by: Daniel Golle <daniel.golle@gmail.com>
Tested-by: Daniel Golle <daniel.golle@gmail.com>
Signed-off-by: Stefan Tomanek <stefan.tomanek@wertarbyte.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/ipv4/fib_rules.c
net/ipv6/fib6_rules.c