• R
    [AX.25]: Fix potencial memory hole. · c7c694d1
    Ralf Baechle DL5RB 提交于
    If the AX.25 dialect chosen by the sysadmin is set to DAMA master / 3
    (or DAMA slave / 2, if CONFIG_AX25_DAMA_SLAVE=n) ax25_kick() will fall
    through the switch statement without calling ax25_send_iframe() or any
    other function that would eventually free skbn thus leaking the packet.
    
    Fix by restricting the sysctl inferface to allow only actually supported
    AX.25 dialects.
    
    The system administration mistake needed for this to happen is rather
    unlikely, so this is an uncritical hole.
    
    Coverity #651.
    Signed-off-by: NRalf Baechle DL5RB <ralf@linux-mips.org>
    Signed-off-by: NDavid S. Miller <davem@davemloft.net>
    c7c694d1
sysctl_net_ax25.c 6.6 KB