]> git.baikalelectronics.ru Git - kernel.git/commit
ipv4: dst_entry leak in ip_send_unicast_reply()
authorVasily Averin <vvs@parallels.com>
Wed, 15 Oct 2014 12:24:02 +0000 (16:24 +0400)
committerDavid S. Miller <davem@davemloft.net>
Fri, 17 Oct 2014 19:30:12 +0000 (15:30 -0400)
commit1538a526d23c7b3c32741ced3d8b6fe6089b7366
tree62d820ef254152a18577cfb2985851ca8e38f932
parentc6bb908a3cf3e93f36fa33acad5dcb09c22f6b12
ipv4: dst_entry leak in ip_send_unicast_reply()

ip_setup_cork() called inside ip_append_data() steals dst entry from rt to cork
and in case errors in __ip_append_data() nobody frees stolen dst entry

Fixes: f6b12bd4b584 ("net: avoid a pair of dst_hold()/dst_release() in ip_append_data()")
Signed-off-by: Vasily Averin <vvs@parallels.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/ip_output.c