[IPV6]: skb leakage in inet6_csk_xmit
authorAlexey Kuznetsov <kuznet@ms2.inr.ac.ru>
Wed, 10 May 2006 20:24:38 +0000 (13:24 -0700)
committerDavid S. Miller <davem@davemloft.net>
Wed, 10 May 2006 20:24:38 +0000 (13:24 -0700)
inet6_csk_xit does not free skb when routing fails.

Signed-off-by: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/inet6_connection_sock.c

index f8f3a37a14948f4d291ba85cac267b33ebdf3079..eb2865d5ae286cdfffa2c098aa881c7c752b526e 100644 (file)
@@ -173,6 +173,7 @@ int inet6_csk_xmit(struct sk_buff *skb, int ipfragok)
 
                if (err) {
                        sk->sk_err_soft = -err;
+                       kfree_skb(skb);
                        return err;
                }
 
@@ -181,6 +182,7 @@ int inet6_csk_xmit(struct sk_buff *skb, int ipfragok)
 
                if ((err = xfrm_lookup(&dst, &fl, sk, 0)) < 0) {
                        sk->sk_route_caps = 0;
+                       kfree_skb(skb);
                        return err;
                }