Eric Dumazet c29390c6df xps: must clear sender_cpu before forwarding ... John reported that my previous commit added a regression on his router. This is because sender_cpu & napi_id share a common location, so get_xps_queue() can see garbage and perform an out of bound access. We need to make sure sender_cpu is cleared before doing the transmit, otherwise any NIC busy poll enabled (skb_mark_napi_id()) can trigger this bug. Signed-off-by: Eric Dumazet <edumazet@google.com> Reported-by: John <jw@nuclearfallout.net> Bisected-by: John <jw@nuclearfallout.net> Fixes: 2bd82484bb ("xps: fix xps for stacked devices") Signed-off-by: David S. Miller <davem@davemloft.net>		2015-03-11 23:51:18 -04:00
..
acpi	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/rzhang/linux	2015-02-19 11:28:36 -08:00
asm-generic	OK, this has the big virtio 1.0 implementation, as specified by OASIS.	2015-02-18 09:24:01 -08:00
clocksource
crypto	Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6	2015-02-14 09:47:01 -08:00
drm	drm/ttm: device address space != CPU address space	2015-03-05 09:04:39 +10:00
dt-bindings	The clock framework changes for 3.20 contain the usual driver additions,	2015-02-21 12:30:30 -08:00
keys
kvm
linux	xps: must clear sender_cpu before forwarding	2015-03-11 23:51:18 -04:00
math-emu
media
memory
misc
net	netfilter: nf_tables: fix userdata length overflow	2015-03-04 18:46:06 +01:00
pcmcia
ras
rdma
rxrpc
scsi	Merge branch 'for-3.20/core' of git://git.kernel.dk/linux-block	2015-02-12 14:13:23 -08:00
soc
sound
target	Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending	2015-02-21 13:21:19 -08:00
trace	Merge branch 'lazytime' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-02-17 16:12:34 -08:00
uapi	TTY/Serial fixes for 4.0-rc3	2015-03-08 12:25:40 -07:00
video	OMAPDSS: fix regression with display sysfs files	2015-02-26 10:23:15 +02:00
xen	x86/xen: allow privcmd hypercalls to be preempted	2015-02-23 16:30:24 +00:00
Kbuild