Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 91d27a86 authored by Sorin Dumitru's avatar Sorin Dumitru Committed by David S. Miller
Browse files

llc: free the right skb 



We are freeing skb instead of nskb, resulting in a double
free on skb and a leak from nskb.

Signed-off-by: default avatarSorin Dumitru <sdumitru@ixiacom.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 8b82f7c3

net/llc/llc_station.c

+3 −3
Original line number Diff line number Diff line
@@ -268,7 +268,7 @@ static int llc_station_ac_send_null_dsap_xid_c(struct sk_buff *skb) 
out:

	return rc;

free:

	kfree_skb(skb);

	kfree_skb(nskb);

	goto out;

}
@@ -293,7 +293,7 @@ static int llc_station_ac_send_xid_r(struct sk_buff *skb) 
out:

	return rc;

free:

	kfree_skb(skb);

	kfree_skb(nskb);

	goto out;

}
@@ -322,7 +322,7 @@ static int llc_station_ac_send_test_r(struct sk_buff *skb) 
out:

	return rc;

free:

	kfree_skb(skb);

	kfree_skb(nskb);

	goto out;

}