tipc: eliminate access after delete in group_filter_msg()
authorJon Maloy <jon.maloy@ericsson.com>
Mon, 27 Nov 2017 19:13:39 +0000 (20:13 +0100)
committerDavid S. Miller <davem@davemloft.net>
Mon, 27 Nov 2017 19:44:45 +0000 (14:44 -0500)
commit2e724dca7749223204bbae21745c0e3fc932700a
tree7580cc4e02d85681a4cc4e70669614d2e9d857e9
parent5b5971df3bc2775107ddad164018a8a8db633b81
tipc: eliminate access after delete in group_filter_msg()

KASAN revealed another access after delete in group.c. This time
it found that we read the header of a received message after the
buffer has been released.

Signed-off-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/tipc/group.c