)]}'
{
  "commit": "ef299cc3fa1a9e1288665a9fdc8bff55629fd359",
  "tree": "260bd9b4c8d37f9770b4b04e30663812728079d8",
  "parents": [
    "4ae649e8879d5a96b0ce104c8eae6563c6f368a1"
  ],
  "author": {
    "name": "Cong Wang",
    "email": "xiyou.wangcong@gmail.com",
    "time": "Fri Mar 13 22:29:54 2020 -0700"
  },
  "committer": {
    "name": "David S. Miller",
    "email": "davem@davemloft.net",
    "time": "Mon Mar 16 01:59:32 2020 -0700"
  },
  "message": "net_sched: cls_route: remove the right filter from hashtable\n\nroute4_change() allocates a new filter and copies values from\nthe old one. After the new filter is inserted into the hash\ntable, the old filter should be removed and freed, as the final\nstep of the update.\n\nHowever, the current code mistakenly removes the new one. This\nlooks apparently wrong to me, and it causes double \"free\" and\nuse-after-free too, as reported by syzbot.\n\nReported-and-tested-by: syzbot+f9b32aaacd60305d9687@syzkaller.appspotmail.com\nReported-and-tested-by: syzbot+2f8c233f131943d6056d@syzkaller.appspotmail.com\nReported-and-tested-by: syzbot+9c2df9fd5e9445b74e01@syzkaller.appspotmail.com\nFixes: 1109c00547fc (\"net: sched: RCU cls_route\")\nCc: Jamal Hadi Salim \u003cjhs@mojatatu.com\u003e\nCc: Jiri Pirko \u003cjiri@resnulli.us\u003e\nCc: John Fastabend \u003cjohn.fastabend@gmail.com\u003e\nSigned-off-by: Cong Wang \u003cxiyou.wangcong@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "6f8786b06bde17721f17280a58a66baab76a684b",
      "old_mode": 33188,
      "old_path": "net/sched/cls_route.c",
      "new_id": "5efa3e7ace1524cee08f4cdea15867f4f0c3dd86",
      "new_mode": 33188,
      "new_path": "net/sched/cls_route.c"
    }
  ]
}
