summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDavid Howells <dhowells@redhat.com>2016-08-09 17:58:42 +0200
committerDavid Howells <dhowells@redhat.com>2016-08-09 18:13:56 +0200
commit992c273af9d9f12a2e470731f69bb3baa694562b (patch)
tree4bbb87b89b5e59cccfb8c55cbf459f640031cdcf
parentrxrpc: Fix a use-after-push in data_ready handler (diff)
downloadlinux-992c273af9d9f12a2e470731f69bb3baa694562b.tar.xz
linux-992c273af9d9f12a2e470731f69bb3baa694562b.zip
rxrpc: Free packets discarded in data_ready
Under certain conditions, the data_ready handler will discard a packet. These need to be freed. Signed-off-by: David Howells <dhowells@redhat.com>
-rw-r--r--net/rxrpc/input.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/net/rxrpc/input.c b/net/rxrpc/input.c
index 789719031462..70bb77818dea 100644
--- a/net/rxrpc/input.c
+++ b/net/rxrpc/input.c
@@ -744,6 +744,8 @@ cant_route_call:
if (sp->hdr.type != RXRPC_PACKET_TYPE_ABORT) {
_debug("reject type %d",sp->hdr.type);
rxrpc_reject_packet(local, skb);
+ } else {
+ rxrpc_free_skb(skb);
}
_leave(" [no call]");
return;