]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a388cd7) | patch
ipv4: dst_entry leak in ip_send_unicast_reply()
authorVasily Averin <vvs@parallels.com>
Wed, 15 Oct 2014 12:24:02 +0000 (16:24 +0400)
committerJiri Slaby <jslaby@suse.cz>
Wed, 5 Nov 2014 09:03:23 +0000 (10:03 +0100)
commitd84c3df2a5f2e6847a15c5d7fbdfba86346e67ab
tree2f2ff1d7349de689219c189bd6a5ed2ba7266b4atree
parenta388cd772c2e0cd19f61a3b0dc8d2ecd6b380216commit | diff
ipv4: dst_entry leak in ip_send_unicast_reply()

[ Upstream commit 4062090e3e5caaf55bed4523a69f26c3265cc1d2 ]

ip_setup_cork() called inside ip_append_data() steals dst entry from rt to cork
and in case errors in __ip_append_data() nobody frees stolen dst entry

Fixes: 2e77d89b2fa8 ("net: avoid a pair of dst_hold()/dst_release() in ip_append_data()")
Signed-off-by: Vasily Averin <vvs@parallels.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/ip_output.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git