Bug in ip_vs.h

[Rodger Erickson <rerickson@xxxxxxxxxxxx>]

        I wanted to point out a bug that could crash the kernel (null prt
dereference).  It occurs in ip_vs.h at the bottom of __ip_vs_get_out_rt().



static inline struct rtable *
__ip_vs_get_out_rt(struct ip_vs_conn *cp, u32 rtos)
{
        if (dest) {
/* snip */
        } else {
                if (ip_route_output(&rt, cp->daddr, 0, rtos, 0)) {
                        IP_VS_DBG_RL("ip_route_output error, dest: "
                                     "%u.%u.%u.%u\n", NIPQUAD(dest->addr));
                        return NULL;
                }
        }

        return rt;
}

        The reference to dest->addr should be changed to cp->daddr

        Thanks,

        Rodger Erickson