projects / openwrt / staging / blogic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b71acb0) | patch
tipc: fix a double free in tipc_enable_bearer()
authorCong Wang <xiyou.wangcong@gmail.com>
Mon, 24 Dec 2018 05:45:56 +0000 (21:45 -0800)
committerDavid S. Miller <davem@davemloft.net>
Fri, 28 Dec 2018 00:16:17 +0000 (16:16 -0800)
commitdc4501ff287547dea7ca10f1c580c741291a8760
tree0a10986ad2cdbfbe097751d9d6183185b5e8f86ftree | snapshot
parentb71acb0e372160167bf6d5500b88b30b52ccef6ecommit | diff
tipc: fix a double free in tipc_enable_bearer()

bearer_disable() already calls kfree_rcu() to free struct tipc_bearer,
we don't need to call kfree() again.

Fixes: cb30a63384bc ("tipc: refactor function tipc_enable_bearer()")
Reported-by: syzbot+b981acf1fb240c0c128b@syzkaller.appspotmail.com
Cc: Ying Xue <ying.xue@windriver.com>
Cc: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/tipc/bearer.c diff | blob | history
John Crispins staging tree