ipv4: dst_entry leak in ip_send_unicast_reply()
authorVasily Averin <vvs@parallels.com>
Wed, 15 Oct 2014 12:24:02 +0000 (16:24 +0400)
committerDavid S. Miller <davem@davemloft.net>
Fri, 17 Oct 2014 19:30:12 +0000 (15:30 -0400)
commit4062090e3e5caaf55bed4523a69f26c3265cc1d2
tree62d820ef254152a18577cfb2985851ca8e38f932
parent461b74c391c4ec9c766794e158508c357d8952e6
ipv4: dst_entry leak in ip_send_unicast_reply()

ip_setup_cork() called inside ip_append_data() steals dst entry from rt to cork
and in case errors in __ip_append_data() nobody frees stolen dst entry

Fixes: 2e77d89b2fa8 ("net: avoid a pair of dst_hold()/dst_release() in ip_append_data()")
Signed-off-by: Vasily Averin <vvs@parallels.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/ip_output.c