1. 21 3月, 2006 7 次提交
  2. 04 1月, 2006 6 次提交
  3. 21 11月, 2005 1 次提交
  4. 09 11月, 2005 1 次提交
  5. 21 10月, 2005 1 次提交
    • H
      [DCCP]: Make dccp_write_xmit always free the packet · ffa29347
      Herbert Xu 提交于
      icmp_send doesn't use skb->sk at all so even if skb->sk has already
      been freed it can't cause crash there (it would've crashed somewhere
      else first, e.g., ip_queue_xmit).
      
      I found a double-free on an skb that could explain this though.
      dccp_sendmsg and dccp_write_xmit are a little confused as to what
      should free the packet when something goes wrong.  Sometimes they
      both go for the ball and end up in each other's way.
      
      This patch makes dccp_write_xmit always free the packet no matter
      what.  This makes sense since dccp_transmit_skb which in turn comes
      from the fact that ip_queue_xmit always frees the packet.
      Signed-off-by: NHerbert Xu <herbert@gondor.apana.org.au>
      Signed-off-by: NArnaldo Carvalho de Melo <acme@mandriva.com>
      ffa29347
  6. 18 9月, 2005 1 次提交
  7. 17 9月, 2005 1 次提交
  8. 30 8月, 2005 14 次提交