diff options
author | Jesper Nilsson <jesper.nilsson@axis.com> | 2009-03-27 00:17:45 -0700 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2009-03-27 00:17:45 -0700 |
commit | 71f6f6dfdf7c7a67462386d9ea05c1095a89c555 (patch) | |
tree | 9c8064b98f5432a04d922a9911ce46d340d2c26b /net/ipv6/ip6_tunnel.c | |
parent | a1702857724fb39cb68ce581490010df99168fd0 (diff) | |
download | blackbird-op-linux-71f6f6dfdf7c7a67462386d9ea05c1095a89c555.tar.gz blackbird-op-linux-71f6f6dfdf7c7a67462386d9ea05c1095a89c555.zip |
ipv6: Plug sk_buff leak in ipv6_rcv (net/ipv6/ip6_input.c)
Commit 778d80be52699596bf70e0eb0761cf5e1e46088d
(ipv6: Add disable_ipv6 sysctl to disable IPv6 operaion on specific interface)
seems to have introduced a leak of sk_buff's for ipv6 traffic,
at least in some configurations where idev is NULL, or when ipv6
is disabled via sysctl.
The problem is that if the first condition of the if-statement
returns non-NULL, it returns an skb with only one reference,
and when the other conditions apply, execution jumps to the "out"
label, which does not call kfree_skb for it.
To plug this leak, change to use the "drop" label instead.
(this relies on it being ok to call kfree_skb on NULL)
This also allows us to avoid calling rcu_read_unlock here,
and removes the only user of the "out" label.
Signed-off-by: Jesper Nilsson <jesper.nilsson@axis.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6/ip6_tunnel.c')
0 files changed, 0 insertions, 0 deletions