Commit fa8705b0 authored Oct 10, 2007 by Tony Battersby Committed by David S. Miller Oct 10, 2007

[NET]: sanitize kernel_accept() error path



If kernel_accept() returns an error, it may pass back a pointer to
freed memory (which the caller should ignore).  Make it pass back NULL
instead for better safety.

Signed-off-by: Tony Battersby <tonyb@cybernetics.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent 414c66e0

net/socket.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -2235,6 +2235,7 @@ int kernel_accept(struct socket sock, struct socket *newsock, int flags)
		err = sock->ops->accept(sock, *newsock, flags);
		if (err < 0) {
		sock_release(*newsock);
		*newsock = NULL;
		goto done;
		}