diff options
author | Alexey Kodanev | 2018-02-05 13:10:35 +0100 |
---|---|---|
committer | David S. Miller | 2018-02-06 03:21:13 +0100 |
commit | 957d761cf91cdbb175ad7d8f5472336a4d54dbf2 (patch) | |
tree | df4f3d6438373a5ed0a6b8e0db5f48dabdb975cd /block | |
parent | dwc-xlgmac: remove Jie Deng as co-maintainer (diff) | |
download | kernel-qcow2-linux-957d761cf91cdbb175ad7d8f5472336a4d54dbf2.tar.gz kernel-qcow2-linux-957d761cf91cdbb175ad7d8f5472336a4d54dbf2.tar.xz kernel-qcow2-linux-957d761cf91cdbb175ad7d8f5472336a4d54dbf2.zip |
sctp: fix dst refcnt leak in sctp_v6_get_dst()
When going through the bind address list in sctp_v6_get_dst() and
the previously found address is better ('matchlen > bmatchlen'),
the code continues to the next iteration without releasing currently
held destination.
Fix it by releasing 'bdst' before continue to the next iteration, and
instead of introducing one more '!IS_ERR(bdst)' check for dst_release(),
move the already existed one right after ip6_dst_lookup_flow(), i.e. we
shouldn't proceed further if we get an error for the route lookup.
Fixes: dbc2b5e9a09e ("sctp: fix src address selection if using secondary addresses for ipv6")
Signed-off-by: Alexey Kodanev <alexey.kodanev@oracle.com>
Acked-by: Neil Horman <nhorman@tuxdriver.com>
Acked-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'block')
0 files changed, 0 insertions, 0 deletions