diff options
| author | Mohamed Ghannam <simo.ghannam@gmail.com> | 2017-12-05 20:58:35 +0000 |
|---|---|---|
| committer | Moyster <oysterized@gmail.com> | 2019-05-03 19:28:04 +0200 |
| commit | 38b135c68edea52d28f491d6c5e6dd26aafa0c20 (patch) | |
| tree | 0a137797d7a9b3a790a76be52086038deaaa7d9a /net/ipv4 | |
| parent | 8e09c6125e20aa1517a1176cb35a1790b845438b (diff) | |
dccp: CVE-2017-8824: use-after-free in DCCP code
commit 69c64866ce072dea1d1e59a0d61e0f66c0dffb76 upstream.
Whenever the sock object is in DCCP_CLOSED state,
dccp_disconnect() must free dccps_hc_tx_ccid and
dccps_hc_rx_ccid and set to NULL.
Change-Id: Ia0117886c40d53cefe76abe044a33ad5657c9508
Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Diffstat (limited to 'net/ipv4')
0 files changed, 0 insertions, 0 deletions