]> git.ipfire.org Git - thirdparty/linux.git/commit
batman-adv: dat: handle forward allocation error
authorSven Eckelmann <sven@narfation.org>
Wed, 13 May 2026 07:01:34 +0000 (09:01 +0200)
committerSven Eckelmann <sven@narfation.org>
Thu, 14 May 2026 18:01:31 +0000 (20:01 +0200)
commit2d8826a2d3657cea66fb0370f9e521575a673871
treea056f4818f0c4845459695e54cb63d1e35734b6d
parenta340a51ed801eab7bb454150c226323b865263cc
batman-adv: dat: handle forward allocation error

batadv_dat_forward_data() calls pskb_copy_for_clone() to duplicate an skb
for each DHT candidate, but does not check the return value before passing
it to batadv_send_skb_prepare_unicast_4addr(). That function dereferences
the skb unconditionally, so a failed allocation triggers a NULL pointer
dereference.

Skip forwarding to the current DHT candidate on allocation failure.

Cc: stable@kernel.org
Fixes: 785ea1144182 ("batman-adv: Distributed ARP Table - create DHT helper functions")
Reported-by: Yuan Tan <yuantan098@gmail.com>
Reported-by: Yifan Wu <yifanwucs@gmail.com>
Reported-by: Juefei Pu <tomapufckgml@gmail.com>
Reported-by: Xin Liu <bird@lzu.edu.cn>
Reviewed-by: Yuan Tan <yuantan098@gmail.com>
Signed-off-by: Sven Eckelmann <sven@narfation.org>
net/batman-adv/distributed-arp-table.c