)]}'
{
  "commit": "d2fbdf76b85bcdfe57b8ef2ba09d20e8ada79abd",
  "tree": "67097bfc390285478c4d385dd586affb2c0b21f2",
  "parents": [
    "a8545b60a8d0d959424beb17b20f6b06b2305b2c"
  ],
  "author": {
    "name": "Vegard Nossum",
    "email": "vegard.nossum@oracle.com",
    "time": "Sat Jul 23 08:15:04 2016 +0200"
  },
  "committer": {
    "name": "David S. Miller",
    "email": "davem@davemloft.net",
    "time": "Mon Aug 15 13:55:36 2016 -0700"
  },
  "message": "tipc: fix NULL pointer dereference in shutdown()\n\ntipc_msg_create() can return a NULL skb and if so, we shouldn\u0027t try to\ncall tipc_node_xmit_skb() on it.\n\n    general protection fault: 0000 [#1] PREEMPT SMP KASAN\n    CPU: 3 PID: 30298 Comm: trinity-c0 Not tainted 4.7.0-rc7+ #19\n    Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Ubuntu-1.8.2-1ubuntu1 04/01/2014\n    task: ffff8800baf09980 ti: ffff8800595b8000 task.ti: ffff8800595b8000\n    RIP: 0010:[\u003cffffffff830bb46b\u003e]  [\u003cffffffff830bb46b\u003e] tipc_node_xmit_skb+0x6b/0x140\n    RSP: 0018:ffff8800595bfce8  EFLAGS: 00010246\n    RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000003023b0e0\n    RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffffffff83d12580\n    RBP: ffff8800595bfd78 R08: ffffed000b2b7f32 R09: 0000000000000000\n    R10: fffffbfff0759725 R11: 0000000000000000 R12: 1ffff1000b2b7f9f\n    R13: ffff8800595bfd58 R14: ffffffff83d12580 R15: dffffc0000000000\n    FS:  00007fcdde242700(0000) GS:ffff88011af80000(0000) knlGS:0000000000000000\n    CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n    CR2: 00007fcddde1db10 CR3: 000000006874b000 CR4: 00000000000006e0\n    DR0: 00007fcdde248000 DR1: 00007fcddd73d000 DR2: 00007fcdde248000\n    DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000090602\n    Stack:\n     0000000000000018 0000000000000018 0000000041b58ab3 ffffffff83954208\n     ffffffff830bb400 ffff8800595bfd30 ffffffff8309d767 0000000000000018\n     0000000000000018 ffff8800595bfd78 ffffffff8309da1a 00000000810ee611\n    Call Trace:\n     [\u003cffffffff830c84a3\u003e] tipc_shutdown+0x553/0x880\n     [\u003cffffffff825b4a3b\u003e] SyS_shutdown+0x14b/0x170\n     [\u003cffffffff8100334c\u003e] do_syscall_64+0x19c/0x410\n     [\u003cffffffff83295ca5\u003e] entry_SYSCALL64_slow_path+0x25/0x25\n    Code: 90 00 b4 0b 83 c7 00 f1 f1 f1 f1 4c 8d 6d e0 c7 40 04 00 00 00 f4 c7 40 08 f3 f3 f3 f3 48 89 d8 48 c1 e8 03 c7 45 b4 00 00 00 00 \u003c80\u003e 3c 30 00 75 78 48 8d 7b 08 49 8d 75 c0 48 b8 00 00 00 00 00\n    RIP  [\u003cffffffff830bb46b\u003e] tipc_node_xmit_skb+0x6b/0x140\n     RSP \u003cffff8800595bfce8\u003e\n    ---[ end trace 57b0484e351e71f1 ]---\n\nI feel like we should maybe return -ENOMEM or -ENOBUFS, but I\u0027m not sure\nuserspace is equipped to handle that. Anyway, this is better than a GPF\nand looks somewhat consistent with other tipc_msg_create() callers.\n\nSigned-off-by: Vegard Nossum \u003cvegard.nossum@oracle.com\u003e\nAcked-by: Ying Xue \u003cying.xue@windriver.com\u003e\nAcked-by: Jon Maloy \u003cjon.maloy@ericsson.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c49b8df438cbeee021bbedf3c96631d82fb16670",
      "old_mode": 33188,
      "old_path": "net/tipc/socket.c",
      "new_id": "f9f5f3c3dab530c0b798d314873800500ccc30b5",
      "new_mode": 33188,
      "new_path": "net/tipc/socket.c"
    }
  ]
}