diff options
| author | Alexey Kuznetsov <kuznet@ms2.inr.ac.ru> | 2006-07-25 16:45:12 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2006-07-25 16:45:12 -0700 |
| commit | 722874909271a807b243a797c2958e0a12992964 (patch) | |
| tree | 341d9c20eacdf8f452d8e2eea61fe2d40923179d /net/ipv6/raw.c | |
| parent | b6e77a5346d8a739227ed73c2269966a4fd652b4 (diff) | |
| download | linux-722874909271a807b243a797c2958e0a12992964.tar.bz2 | |
[IPV4] ipmr: ip multicast route bug fix.
IP multicast route code was reusing an skb which causes use after free
and double free.
From: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
Note, it is real skb_clone(), not alloc_skb(). Equeued skb contains
the whole half-prepared netlink message plus room for the rest.
It could be also skb_copy(), if we want to be puristic about mangling
cloned data, but original copy is really not going to be used.
Acked-by: Stephen Hemminger <shemminger@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6/raw.c')
0 files changed, 0 insertions, 0 deletions