https://github.com/torvalds/linux
Revision c545a945d0d9ea2ea2c7d23d43cf0d86e32cd7cf authored by Jon Maloy on 11 December 2017, 18:11:55 UTC, committed by David S. Miller on 13 December 2017, 18:44:36 UTC
In the function tipc_sk_mcast_rcv() we call refcount_dec(&skb->users)
on received sk_buffers. Since the reference counter might hit zero at
this point, we have a potential memory leak.

We fix this by replacing refcount_dec() with kfree_skb().

Signed-off-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 8359301
History
Tip revision: c545a945d0d9ea2ea2c7d23d43cf0d86e32cd7cf authored by Jon Maloy on 11 December 2017, 18:11:55 UTC
tipc: eliminate potential memory leak
Tip revision: c545a94
File Mode Size
Makefile -rw-r--r-- 361 bytes
compat.c -rw-r--r-- 2.2 KB
ipc_sysctl.c -rw-r--r-- 5.4 KB
mq_sysctl.c -rw-r--r-- 2.9 KB
mqueue.c -rw-r--r-- 40.1 KB
msg.c -rw-r--r-- 27.4 KB
msgutil.c -rw-r--r-- 3.6 KB
namespace.c -rw-r--r-- 4.8 KB
sem.c -rw-r--r-- 58.1 KB
shm.c -rw-r--r-- 38.6 KB
syscall.c -rw-r--r-- 4.3 KB
util.c -rw-r--r-- 22.2 KB
util.h -rw-r--r-- 7.2 KB

back to top