提交 91d27a86 编写于 作者: S Sorin Dumitru 提交者: David S. Miller

llc: free the right skb

We are freeing skb instead of nskb, resulting in a double
free on skb and a leak from nskb.
Signed-off-by: NSorin Dumitru <sdumitru@ixiacom.com>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>
上级 8b82f7c3
...@@ -268,7 +268,7 @@ static int llc_station_ac_send_null_dsap_xid_c(struct sk_buff *skb) ...@@ -268,7 +268,7 @@ static int llc_station_ac_send_null_dsap_xid_c(struct sk_buff *skb)
out: out:
return rc; return rc;
free: free:
kfree_skb(skb); kfree_skb(nskb);
goto out; goto out;
} }
...@@ -293,7 +293,7 @@ static int llc_station_ac_send_xid_r(struct sk_buff *skb) ...@@ -293,7 +293,7 @@ static int llc_station_ac_send_xid_r(struct sk_buff *skb)
out: out:
return rc; return rc;
free: free:
kfree_skb(skb); kfree_skb(nskb);
goto out; goto out;
} }
...@@ -322,7 +322,7 @@ static int llc_station_ac_send_test_r(struct sk_buff *skb) ...@@ -322,7 +322,7 @@ static int llc_station_ac_send_test_r(struct sk_buff *skb)
out: out:
return rc; return rc;
free: free:
kfree_skb(skb); kfree_skb(nskb);
goto out; goto out;
} }
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册