]> bbs.cooldavid.org Git - net-next-2.6.git/commit - net/ipv4/ipmr.c
[IPV4] ipmr: ip multicast route bug fix.
authorAlexey Kuznetsov <kuznet@ms2.inr.ac.ru>
Tue, 25 Jul 2006 23:45:12 +0000 (16:45 -0700)
committerDavid S. Miller <davem@davemloft.net>
Tue, 25 Jul 2006 23:45:12 +0000 (16:45 -0700)
commit722874909271a807b243a797c2958e0a12992964
tree341d9c20eacdf8f452d8e2eea61fe2d40923179d
parentb6e77a5346d8a739227ed73c2269966a4fd652b4
[IPV4] ipmr: ip multicast route bug fix.

IP multicast route code was reusing an skb which causes use after free
and double free.

From: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>

Note, it is real skb_clone(), not alloc_skb(). Equeued skb contains
the whole half-prepared netlink message plus room for the rest.
It could be also skb_copy(), if we want to be puristic about mangling
cloned data, but original copy is really not going to be used.

Acked-by: Stephen Hemminger <shemminger@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/ipmr.c