]> git.baikalelectronics.ru Git - kernel.git/commit
can: j1939: j1939_session_destroy(): fix memory leak of skbs
authorFedor Pchelkin <pchelkin@ispras.ru>
Fri, 5 Aug 2022 15:02:16 +0000 (18:02 +0300)
committerMarc Kleine-Budde <mkl@pengutronix.de>
Tue, 9 Aug 2022 07:05:06 +0000 (09:05 +0200)
commit46b774ce928c476f450813b76153400549917b98
tree2e7f11461b9d62a1e6798b71c4aa9f789569e532
parent91c8451e462ce9645cce21056a3cb430939dba78
can: j1939: j1939_session_destroy(): fix memory leak of skbs

We need to drop skb references taken in j1939_session_skb_queue() when
destroying a session in j1939_session_destroy(). Otherwise those skbs
would be lost.

Link to Syzkaller info and repro: https://forge.ispras.ru/issues/11743.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.

V1: https://lore.kernel.org/all/20220708175949.539064-1-pchelkin@ispras.ru

Fixes: c4da2dabb66d ("can: add support of SAE J1939 protocol")
Suggested-by: Oleksij Rempel <o.rempel@pengutronix.de>
Signed-off-by: Fedor Pchelkin <pchelkin@ispras.ru>
Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru>
Acked-by: Oleksij Rempel <o.rempel@pengutronix.de>
Link: https://lore.kernel.org/all/20220805150216.66313-1-pchelkin@ispras.ru
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
net/can/j1939/transport.c