https://github.com/torvalds/linux
Revision f92a80a9972175a6a1d36c6c44be47fb0efd020d authored by Daniele Di Proietto on 28 November 2016, 23:43:53 UTC, committed by David S. Miller on 30 November 2016, 16:00:45 UTC
If nf_ct_frag6_gather() returns an error other than -EINPROGRESS, it
means that we still have a reference to the skb.  We should free it
before returning from handle_fragments, as stated in the comment above.

Fixes: daaa7d647f81 ("netfilter: ipv6: avoid nf_iterate recursion")
CC: Florian Westphal <fw@strlen.de>
CC: Pravin B Shelar <pshelar@ovn.org>
CC: Joe Stringer <joe@ovn.org>
Signed-off-by: Daniele Di Proietto <diproiettod@ovn.org>
Acked-by: Pravin B Shelar <pshelar@ovn.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent f2ebf2a
History
Tip revision: f92a80a9972175a6a1d36c6c44be47fb0efd020d authored by Daniele Di Proietto on 28 November 2016, 23:43:53 UTC
openvswitch: Fix skb leak in IPv6 reassembly.
Tip revision: f92a80a
File Mode Size
.gitignore -rw-r--r-- 44 bytes
Kconfig -rw-r--r-- 2.6 KB
Makefile -rw-r--r-- 3.7 KB
system_certificates.S -rw-r--r-- 917 bytes
system_keyring.c -rw-r--r-- 6.8 KB

back to top