)]}'
{
  "commit": "bf945a4e17d9a0c73881d4a6ac2ac8e7e5f85ca0",
  "tree": "be73f1465c25a69b8897c2095cf85f854cb99d0b",
  "parents": [
    "ff08cf6a8fce6c0aa39cb50fdba5698b37984107"
  ],
  "author": {
    "name": "Willem de Bruijn",
    "email": "willemb@google.com",
    "time": "Wed Dec 15 09:39:37 2021 -0500"
  },
  "committer": {
    "name": "Robert Kolchmeyer",
    "email": "rkolchmeyer@google.com",
    "time": "Mon Jan 10 22:21:01 2022 +0000"
  },
  "message": "net/packet: rx_owner_map depends on pg_vec\n\n[ Upstream commit ec6af094ea28f0f2dda1a6a33b14cd57e36a9755 ]\n\nPacket sockets may switch ring versions. Avoid misinterpreting state\nbetween versions, whose fields share a union. rx_owner_map is only\nallocated with a packet ring (pg_vec) and both are swapped together.\nIf pg_vec is NULL, meaning no packet ring was allocated, then neither\nwas rx_owner_map. And the field may be old state from a tpacket_v3.\n\nFixes: 61fad6816fc1 (\"net/packet: tpacket_rcv: avoid a producer race condition\")\nReported-by: Syzbot \u003csyzbot+1ac0994a0a0c55151121@syzkaller.appspotmail.com\u003e\nSigned-off-by: Willem de Bruijn \u003cwillemb@google.com\u003e\nReviewed-by: Eric Dumazet \u003cedumazet@google.com\u003e\nLink: https://lore.kernel.org/r/20211215143937.106178-1-willemdebruijn.kernel@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n(cherry picked from commit 7da349f07e457cad135df0920a3f670e423fb5e9)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n\nBUG\u003db/213408300,b/213920404\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed a double-free issue in packet_set_ring in the Linux kernel.\n\ncos-patch: bug\nChange-Id: Ida77996f5bcbdf5441eb3bf8b15a9025809f2d35\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/27240\nReviewed-by: Vaibhav Rustagi \u003cvaibhavrustagi@google.com\u003e\nReviewed-by: Oleksandr Tymoshenko \u003covt@google.com\u003e\nTested-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "08144559eed56ea19a5ceb1c2cc349caf1040aea",
      "old_mode": 33188,
      "old_path": "net/packet/af_packet.c",
      "new_id": "f78097aa403a8bea058145a29829392b7015661e",
      "new_mode": 33188,
      "new_path": "net/packet/af_packet.c"
    }
  ]
}