]> git.neil.brown.name Git - history.git/commit
projects / history.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bdba9fe) | patch
[NET] Fix use after free in AX.25
authorStephen Hemminger <shemminger@osdl.org>
Wed, 6 Aug 2003 20:30:30 +0000 (06:30 +1000)
committerStephen Hemminger <shemminger@osdl.org>
Wed, 6 Aug 2003 20:30:30 +0000 (06:30 +1000)
commitca8c5e0ed008cd41d69d6a47165de0f785706896
tree8ef9f88a07a57be753e38a29ec4c5a3fb1d6cc16tree | snapshot
parentbdba9fe94c5852c8f4956709bd711e07108778b3commit | diff
[NET] Fix use after free in AX.25

This patch is against 2.6.0-test2.  The problem is that the ax25_destroy_socket
function frees the socket buffer, but then ax25_release dereferences this causing
an OOPS.  To reproduce:
        modprobe ax25; ifconfig -a

Replaced sk_free with sock_put which will free if this is the last reference.
net/ax25/af_ax25.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.