]> git.itanic.dy.fi Git - linux-stable/commit
drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit
authorLv Yunlong <lyl2019@mail.ustc.edu.cn>
Sun, 28 Mar 2021 07:50:08 +0000 (00:50 -0700)
committerDavid S. Miller <davem@davemloft.net>
Mon, 29 Mar 2021 01:08:43 +0000 (18:08 -0700)
commit1b479fb801602b22512f53c19b1f93a4fc5d5d9d
tree52ded9bf40711d25bbbbb025a939a8a0e6258212
parent75887e881b19c903d34b7cc33e7e6188679d9752
drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit

In pvc_xmit, if __skb_pad(skb, pad, false) failed, it will free
the skb in the first time and goto drop. But the same skb is freed
by kfree_skb(skb) in the second time in drop.

Maintaining the original function unchanged, my patch adds a new
label out to avoid the double free if __skb_pad() failed.

Fixes: f5083d0cee08a ("drivers/net/wan/hdlc_fr: Improvements to the code of pvc_xmit")
Signed-off-by: Lv Yunlong <lyl2019@mail.ustc.edu.cn>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/wan/hdlc_fr.c