Commit b425df4c authored Jan 25, 2013 by Dan Carpenter Committed by Simon Horman Jan 28, 2013

ipvs: freeing uninitialized pointer on error



If state != IP_VS_STATE_BACKUP then tinfo->buf is uninitialized.  If
kthread_run() fails then it means we free random memory resulting in an
oops.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>

parent 5b76c494

net/netfilter/ipvs/ip_vs_sync.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -1795,6 +1795,8 @@ int start_sync_thread(struct net net, int state, char mcast_ifn, __u8 syncid)
		GFP_KERNEL);
		if (!tinfo->buf)
		goto outtinfo;
		} else {
		tinfo->buf = NULL;
		}
		tinfo->id = id;