diff options
| author |   Alexey Kuznetsov <kuznet@ms2.inr.ac.ru> | 2006-05-10 13:24:38 -0700 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2006-05-10 13:24:38 -0700 |
| commit | b0013fd47b14fc26eec07a6b2cec0c2a8954e1d7 (patch) | |
| tree | 583acfdfe67939861e8ebe841a6958c74fd3bd7e /net/ipv6 | |
| parent | [BRIDGE]: Do sysfs registration inside rtnl. (diff) | |
| download | linux-dev-b0013fd47b14fc26eec07a6b2cec0c2a8954e1d7.tar.xz linux-dev-b0013fd47b14fc26eec07a6b2cec0c2a8954e1d7.zip | |
[IPV6]: skb leakage in inet6_csk_xmit
inet6_csk_xit does not free skb when routing fails.
Signed-off-by: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6')
| -rw-r--r-- | net/ipv6/inet6_connection_sock.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/net/ipv6/inet6_connection_sock.c b/net/ipv6/inet6_connection_sock.c index f8f3a37a1494..eb2865d5ae28 100644 --- a/net/ipv6/inet6_connection_sock.c +++ b/net/ipv6/inet6_connection_sock.c @@ -173,6 +173,7 @@ int inet6_csk_xmit(struct sk_buff *skb, int ipfragok) if (err) { sk->sk_err_soft = -err; + kfree_skb(skb); return err; } @@ -181,6 +182,7 @@ int inet6_csk_xmit(struct sk_buff *skb, int ipfragok) if ((err = xfrm_lookup(&dst, &fl, sk, 0)) < 0) { sk->sk_route_caps = 0; + kfree_skb(skb); return err; } |