diff options
| author |   zhengbin <zhengbin13@huawei.com> | 2019-08-13 22:05:50 +0800 |
|---|---|---|
| committer |   Jakub Kicinski <jakub.kicinski@netronome.com> | 2019-08-13 20:45:01 -0700 |
| commit | 6d5afe20397b478192ed8c38ec0ee10fa3aec649 (patch) | |
| tree | f6a5230b5b9e1db18a87a04dff665fcc961a5e53 /net | |
| parent | netlink: Fix nlmsg_parse as a wrapper for strict message parsing (diff) | |
| download | linux-dev-6d5afe20397b478192ed8c38ec0ee10fa3aec649.tar.xz linux-dev-6d5afe20397b478192ed8c38ec0ee10fa3aec649.zip | |
sctp: fix memleak in sctp_send_reset_streams
If the stream outq is not empty, need to kfree nstr_list.
Fixes: d570a59c5b5f ("sctp: only allow the out stream reset when the stream outq is empty")
Reported-by: Hulk Robot <hulkci@huawei.com>
Signed-off-by: zhengbin <zhengbin13@huawei.com>
Acked-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Acked-by: Neil Horman <nhorman@tuxdriver.com>
Signed-off-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Diffstat (limited to 'net')
| -rw-r--r-- | net/sctp/stream.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/sctp/stream.c b/net/sctp/stream.c index 25946604af85..e83cdaa2ab76 100644 --- a/net/sctp/stream.c +++ b/net/sctp/stream.c @@ -316,6 +316,7 @@ int sctp_send_reset_streams(struct sctp_association *asoc, nstr_list[i] = htons(str_list[i]); if (out && !sctp_stream_outq_is_empty(stream, str_nums, nstr_list)) { + kfree(nstr_list); retval = -EAGAIN; goto out; } |