https://github.com/torvalds/linux
Revision c545a945d0d9ea2ea2c7d23d43cf0d86e32cd7cf authored by Jon Maloy on 11 December 2017, 18:11:55 UTC, committed by David S. Miller on 13 December 2017, 18:44:36 UTC
In the function tipc_sk_mcast_rcv() we call refcount_dec(&skb->users)
on received sk_buffers. Since the reference counter might hit zero at
this point, we have a potential memory leak.

We fix this by replacing refcount_dec() with kfree_skb().

Signed-off-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 8359301
History
Tip revision: c545a945d0d9ea2ea2c7d23d43cf0d86e32cd7cf authored by Jon Maloy on 11 December 2017, 18:11:55 UTC
tipc: eliminate potential memory leak
Tip revision: c545a94

back to top