https://github.com/torvalds/linux
Revision c545a945d0d9ea2ea2c7d23d43cf0d86e32cd7cf authored by Jon Maloy on 11 December 2017, 18:11:55 UTC, committed by David S. Miller on 13 December 2017, 18:44:36 UTC
In the function tipc_sk_mcast_rcv() we call refcount_dec(&skb->users)
on received sk_buffers. Since the reference counter might hit zero at
this point, we have a potential memory leak.

We fix this by replacing refcount_dec() with kfree_skb().

Signed-off-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 8359301
History
Tip revision: c545a945d0d9ea2ea2c7d23d43cf0d86e32cd7cf authored by Jon Maloy on 11 December 2017, 18:11:55 UTC
tipc: eliminate potential memory leak
Tip revision: c545a94
File Mode Size
bebob
dice
digi00x
fireface
fireworks
motu
oxfw
tascam
Kconfig -rw-r--r-- 4.7 KB
Makefile -rw-r--r-- 664 bytes
amdtp-am824.c -rw-r--r-- 11.0 KB
amdtp-am824.h -rw-r--r-- 1.6 KB
amdtp-stream-trace.h -rw-r--r-- 6.0 KB
amdtp-stream.c -rw-r--r-- 27.9 KB
amdtp-stream.h -rw-r--r-- 7.6 KB
cmp.c -rw-r--r-- 9.4 KB
cmp.h -rw-r--r-- 1.4 KB
fcp.c -rw-r--r-- 10.3 KB
fcp.h -rw-r--r-- 1.0 KB
isight.c -rw-r--r-- 17.6 KB
iso-resources.c -rw-r--r-- 6.5 KB
iso-resources.h -rw-r--r-- 1.2 KB
lib.c -rw-r--r-- 3.1 KB
lib.h -rw-r--r-- 775 bytes
packets-buffer.c -rw-r--r-- 2.1 KB
packets-buffer.h -rw-r--r-- 786 bytes

back to top