We are freeing skb instead of nskb, resulting in a double
free on skb and a leak from nskb.

Signed-off-by: Sorin Dumitru <sdumitru@ixiacom.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Sorin Dumitru 2012-08-06 02:35:58 +00:00 коммит произвёл David S. Miller
Родитель 8b82f7c3c9
Коммит 91d27a8650
1 изменённых файлов: 3 добавлений и 3 удалений

Просмотреть файл

@ -268,7 +268,7 @@ static int llc_station_ac_send_null_dsap_xid_c(struct sk_buff *skb)
out:
return rc;
free:
kfree_skb(skb);
kfree_skb(nskb);
goto out;
}
@ -293,7 +293,7 @@ static int llc_station_ac_send_xid_r(struct sk_buff *skb)
out:
return rc;
free:
kfree_skb(skb);
kfree_skb(nskb);
goto out;
}
@ -322,7 +322,7 @@ static int llc_station_ac_send_test_r(struct sk_buff *skb)
out:
return rc;
free:
kfree_skb(skb);
kfree_skb(nskb);
goto out;
}