Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b0013fd4 authored by Alexey Kuznetsov's avatar Alexey Kuznetsov Committed by David S. Miller
Browse files

[IPV6]: skb leakage in inet6_csk_xmit 



inet6_csk_xit does not free skb when routing fails.

Signed-off-by: default avatarAlexey Kuznetsov <kuznet@ms2.inr.ac.ru>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent ac05202e

net/ipv6/inet6_connection_sock.c

+2 −0
Original line number Original line Diff line number Diff line
@@ -173,6 +173,7 @@ int inet6_csk_xmit(struct sk_buff *skb, int ipfragok) 




		if (err) {

		if (err) {

			sk->sk_err_soft = -err;

			sk->sk_err_soft = -err;

			kfree_skb(skb);

			return err;

			return err;

		}

		}
@@ -181,6 +182,7 @@ int inet6_csk_xmit(struct sk_buff *skb, int ipfragok) 




		if ((err = xfrm_lookup(&dst, &fl, sk, 0)) < 0) {

		if ((err = xfrm_lookup(&dst, &fl, sk, 0)) < 0) {

			sk->sk_route_caps = 0;

			sk->sk_route_caps = 0;

			kfree_skb(skb);

			return err;

			return err;

		}

		}