Commit fcb8c156 authored Dec 30, 2007 by Herbert Xu Committed by David S. Miller Jan 28, 2008

[IPSEC]: Fix double free on skb on async output

When the output transform returns EINPROGRESS due to async operation we'll
free the skb the straight away as if it were an error. This patch fixes
that so that the skb is freed when the async operation completes.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent 15ca36fb

net/xfrm/xfrm_output.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -78,6 +78,8 @@ static int xfrm_output_one(struct sk_buff *skb, int err)
		spin_unlock_bh(&x->lock);

		err = x->type->output(x, skb);
		if (err == -EINPROGRESS)
		goto out_exit;

		resume:
		if (err) {