diff options
| author | Vasily Averin <vvs@parallels.com> | 2014-10-15 16:24:02 +0400 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2014-10-17 15:30:12 -0400 |
| commit | 4062090e3e5caaf55bed4523a69f26c3265cc1d2 (patch) | |
| tree | 62d820ef254152a18577cfb2985851ca8e38f932 /security | |
| parent | 461b74c391c4ec9c766794e158508c357d8952e6 (diff) | |
| download | op-kernel-dev-4062090e3e5caaf55bed4523a69f26c3265cc1d2.zip op-kernel-dev-4062090e3e5caaf55bed4523a69f26c3265cc1d2.tar.gz | |
ipv4: dst_entry leak in ip_send_unicast_reply()
ip_setup_cork() called inside ip_append_data() steals dst entry from rt to cork
and in case errors in __ip_append_data() nobody frees stolen dst entry
Fixes: 2e77d89b2fa8 ("net: avoid a pair of dst_hold()/dst_release() in ip_append_data()")
Signed-off-by: Vasily Averin <vvs@parallels.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions
