[3.11.y.z extended stable] Patch "vxlan: fix potential NULL dereference in arp_reduce()" has been added to staging queue

[Luis Henriques]

This is a note to let you know that I have just added a patch titled

    vxlan: fix potential NULL dereference in arp_reduce()

to the linux-3.11.y-queue branch of the 3.11.y.z extended stable tree 
which can be found at:

 http://kernel.ubuntu.com/git?p=ubuntu/linux.git;a=shortlog;h=refs/heads/linux-3.11.y-queue

If you, or anyone else, feels it should not be added to this tree, please 
reply to this email.

For more information about the 3.11.y.z tree, see
https://wiki.ubuntu.com/Kernel/Dev/ExtendedStable

Thanks.
-Luis

------

>From 0584087de2160241a8a4239301539a01a7cc8484 Mon Sep 17 00:00:00 2001
From: David Stevens <dlstevens at us.ibm.com>
Date: Tue, 18 Mar 2014 12:32:29 -0400
Subject: vxlan: fix potential NULL dereference in arp_reduce()

commit 7346135dcd3f9b57f30a5512094848c678d7143e upstream.

This patch fixes a NULL pointer dereference in the event of an
skb allocation failure in arp_reduce().

Signed-Off-By: David L Stevens <dlstevens at us.ibm.com>
Acked-by: Cong Wang <cwang at twopensource.com>

Signed-off-by: David S. Miller <davem at davemloft.net>
Signed-off-by: Luis Henriques <luis.henriques at canonical.com>
---
 drivers/net/vxlan.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/drivers/net/vxlan.c b/drivers/net/vxlan.c
index 8a05d77..116810f 100644
--- a/drivers/net/vxlan.c
+++ b/drivers/net/vxlan.c
@@ -978,6 +978,9 @@ static int arp_reduce(struct net_device *dev, struct sk_buff *skb)

 		neigh_release(n);

+		if (reply == NULL)
+			goto out;
+
 		skb_reset_mac_header(reply);
 		__skb_pull(reply, skb_network_offset(reply));
 		reply->ip_summed = CHECKSUM_UNNECESSARY;
--
1.9.1