On 29/08/17 22:02, Nikolay Aleksandrov wrote: > If sch_hhf fails in its ->init() function (either due to wrong > user-space arguments as below or memory alloc failure of hh_flows) it > will do a null pointer deref of q->hh_flows in its ->destroy() function. > > To reproduce the crash: > $ tc qdisc add dev eth0 root hhf quantum 2000000 non_hh_weight 10000000 >
Uh, sorry about sending these out separately. I'll send the rest as a set for easier review once I test them, should be just a couple more.
