)]}'
{
  "commit": "5ed555a986ca2c52a6ebcb9876f8daf38f745f34",
  "tree": "aeb7e00a71d062a769c92234f19d74c708384bc6",
  "parents": [
    "c074770a6656e3c882367954354c2cdb08b6b59e"
  ],
  "author": {
    "name": "Willem de Bruijn",
    "email": "willemb@google.com",
    "time": "Wed Dec 15 09:39:37 2021 -0500"
  },
  "committer": {
    "name": "Robert Kolchmeyer",
    "email": "rkolchmeyer@google.com",
    "time": "Mon Jan 10 22:36:11 2022 +0000"
  },
  "message": "net/packet: rx_owner_map depends on pg_vec\n\n[ Upstream commit ec6af094ea28f0f2dda1a6a33b14cd57e36a9755 ]\n\nPacket sockets may switch ring versions. Avoid misinterpreting state\nbetween versions, whose fields share a union. rx_owner_map is only\nallocated with a packet ring (pg_vec) and both are swapped together.\nIf pg_vec is NULL, meaning no packet ring was allocated, then neither\nwas rx_owner_map. And the field may be old state from a tpacket_v3.\n\nFixes: 61fad6816fc1 (\"net/packet: tpacket_rcv: avoid a producer race condition\")\nReported-by: Syzbot \u003csyzbot+1ac0994a0a0c55151121@syzkaller.appspotmail.com\u003e\nSigned-off-by: Willem de Bruijn \u003cwillemb@google.com\u003e\nReviewed-by: Eric Dumazet \u003cedumazet@google.com\u003e\nLink: https://lore.kernel.org/r/20211215143937.106178-1-willemdebruijn.kernel@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n(cherry picked from commit 027a13973dadb64ef4f19db56c9b619ee82c3375)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n\nBUG\u003db/213408300,b/213920435\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed a double-free issue in packet_set_ring in the Linux kernel.\n\ncos-patch: bug\nChange-Id: Ida77996f5bcbdf5441eb3bf8b15a9025809f2d35\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/27261\nReviewed-by: Vaibhav Rustagi \u003cvaibhavrustagi@google.com\u003e\nReviewed-by: Oleksandr Tymoshenko \u003covt@google.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "0ffbf3d17911a25d33bff1786832341fa2e229ca",
      "old_mode": 33188,
      "old_path": "net/packet/af_packet.c",
      "new_id": "6062bd5bf132b637501d53a5f81ea90858e301f8",
      "new_mode": 33188,
      "new_path": "net/packet/af_packet.c"
    }
  ]
}
