Lv Yunlong e5e5ecc9d9 net:tipc: Fix a double free in tipc_sk_mcast_rcv ... [ Upstream commit 6bf24dc0cc ] In the if(skb_peek(arrvq) == skb) branch, it calls __skb_dequeue(arrvq) to get the skb by skb = skb_peek(arrvq). Then __skb_dequeue() unlinks the skb from arrvq and returns the skb which equals to skb_peek(arrvq). After __skb_dequeue(arrvq) finished, the skb is freed by kfree_skb(__skb_dequeue(arrvq)) in the first time. Unfortunately, the same skb is freed in the second time by kfree_skb(skb) after the branch completed. My patch removes kfree_skb() in the if(skb_peek(arrvq) == skb) branch, because this skb will be freed by kfree_skb(skb) finally. Fixes: cb1b728096 ("tipc: eliminate race condition at multicast reception") Signed-off-by: Lv Yunlong <lyl2019@mail.ustc.edu.cn> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>		2021-04-14 08:42:08 +02:00
..
addr.c	tipc: initialise addr_trail_end when setting node addresses	2019-08-11 21:40:04 -07:00
addr.h
bcast.c	tipc: fix incorrect setting window for bcast link	2020-10-16 14:09:12 -07:00
bcast.h	tipc: update a binding service via broadcast	2020-06-17 08:53:34 -07:00
bearer.c	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
bearer.h	tipc: introduce variable window congestion control	2019-12-10 17:31:15 -08:00
core.c	tipc: fix a deadlock when flushing scheduled work	2020-09-07 12:08:53 -07:00
core.h	tipc: fix a deadlock when flushing scheduled work	2020-09-07 12:08:53 -07:00
crypto.c	mm: remove kzfree() compatibility definition	2020-10-25 11:39:02 -07:00
crypto.h	tipc: add automatic rekeying for encryption key	2020-09-18 13:58:37 -07:00
diag.c
discover.c	net: tipc: kerneldoc fixes	2020-07-13 17:20:40 -07:00
discover.h
eth_media.c	tipc: Use is_broadcast_ether_addr() instead of memcmp()	2020-08-03 16:21:46 -07:00
group.c	tipc: Fix memory leak in tipc_group_create_member()	2020-09-14 16:36:20 -07:00
group.h
ib_media.c	tipc: introduce variable window congestion control	2019-12-10 17:31:15 -08:00
Kconfig	tipc: not enable tipc when ipv6 works as a module	2020-08-16 21:04:55 -07:00
link.c	tipc: fix NULL deref in tipc_link_xmit()	2021-01-23 16:04:00 +01:00
link.h	tipc: add support for broadcast rcv stats dumping	2020-05-26 15:16:52 -07:00
Makefile	tipc: remove meaningless assignment in Makefile	2020-01-08 12:38:54 -08:00
monitor.c	tipc: add NULL pointer check to prevent kernel oops	2020-03-15 00:07:00 -07:00
monitor.h	tipc: update mon's self addr when node addr generated	2019-11-12 19:45:45 -08:00
msg.c	tipc: fix memory leak caused by tipc_buf_append()	2020-10-29 09:51:52 -07:00
msg.h	tipc: add automatic session key exchange	2020-09-18 13:58:37 -07:00
name_distr.c	tipc: fix NULL pointer dereference in tipc_named_rcv	2020-10-09 18:29:06 -07:00
name_distr.h	tipc: update a binding service via broadcast	2020-06-17 08:53:34 -07:00
name_table.c	tipc: update a binding service via broadcast	2020-06-17 08:53:34 -07:00
name_table.h	tipc: update a binding service via broadcast	2020-06-17 08:53:34 -07:00
net.c	tipc: fix a deadlock when flushing scheduled work	2020-09-07 12:08:53 -07:00
net.h	tipc: fix a deadlock when flushing scheduled work	2020-09-07 12:08:53 -07:00
netlink_compat.c	genetlink: move to smaller ops wherever possible	2020-10-02 19:11:11 -07:00
netlink.c	tipc: add automatic rekeying for encryption key	2020-09-18 13:58:37 -07:00
netlink.h	net: tipc: allocate attrs locally instead of using genl_family_attrbuf in compat_dumpit()	2019-10-06 15:44:47 +02:00
node.c	tipc: better validate user input in tipc_nl_retrieve_key()	2021-03-30 14:31:59 +02:00
node.h	tipc: add automatic session key exchange	2020-09-18 13:58:37 -07:00
socket.c	net:tipc: Fix a double free in tipc_sk_mcast_rcv	2021-04-14 08:42:08 +02:00
socket.h	tipc: call tsk_set_importance from tipc_topsrv_create_listener	2020-05-28 11:11:46 -07:00
subscr.c
subscr.h	tipc: fix failed service subscription deletion	2020-05-13 12:33:19 -07:00
sysctl.c	tipc: add automatic session key exchange	2020-09-18 13:58:37 -07:00
topsrv.c	tipc: fix memory leak in tipc_topsrv_start()	2020-11-11 14:39:23 -08:00
topsrv.h
trace.c
trace.h	tipc: add support for broadcast rcv stats dumping	2020-05-26 15:16:52 -07:00
udp_media.c	net: tipc: Supply missing udp_media.h include file	2020-09-18 14:56:44 -07:00
udp_media.h