diff options
author | Alexey Kuznetsov <kuznet@ms2.inr.ac.ru> | 2006-05-10 13:24:38 -0700 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2006-05-10 13:24:38 -0700 |
commit | b0013fd47b14fc26eec07a6b2cec0c2a8954e1d7 (patch) | |
tree | 583acfdfe67939861e8ebe841a6958c74fd3bd7e /net | |
parent | ac05202e8b83594bf6797d241371e6c752f371e6 (diff) | |
download | op-kernel-dev-b0013fd47b14fc26eec07a6b2cec0c2a8954e1d7.zip op-kernel-dev-b0013fd47b14fc26eec07a6b2cec0c2a8954e1d7.tar.gz |
[IPV6]: skb leakage in inet6_csk_xmit
inet6_csk_xit does not free skb when routing fails.
Signed-off-by: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
-rw-r--r-- | net/ipv6/inet6_connection_sock.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/net/ipv6/inet6_connection_sock.c b/net/ipv6/inet6_connection_sock.c index f8f3a37..eb2865d 100644 --- a/net/ipv6/inet6_connection_sock.c +++ b/net/ipv6/inet6_connection_sock.c @@ -173,6 +173,7 @@ int inet6_csk_xmit(struct sk_buff *skb, int ipfragok) if (err) { sk->sk_err_soft = -err; + kfree_skb(skb); return err; } @@ -181,6 +182,7 @@ int inet6_csk_xmit(struct sk_buff *skb, int ipfragok) if ((err = xfrm_lookup(&dst, &fl, sk, 0)) < 0) { sk->sk_route_caps = 0; + kfree_skb(skb); return err; } |