diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2018-06-01 09:59:25 +0200 |
|---|---|---|
| committer | Herbert Xu <herbert@gondor.apana.org.au> | 2018-06-15 17:06:45 +0200 |
| commit | f70b359b3830b7a5b72c78136edc740839b67acd (patch) | |
| tree | ff85623d9bd6aa86ec7247d69350754ea988800b /arch | |
| parent | crypto: chtls - free beyond end rspq_skb_cache (diff) | |
| download | linux-f70b359b3830b7a5b72c78136edc740839b67acd.tar.xz linux-f70b359b3830b7a5b72c78136edc740839b67acd.zip | |
crypto: chtls - use after free in chtls_pt_recvmsg()
We call chtls_free_skb() but then we dereference it on the next lines.
Also "skb" can't be NULL, we just dereferenced it on the line before.
I have moved the free down a couple lines to fix this issue.
Fixes: 17a7d24aa89d ("crypto: chtls - generic handling of data and hdr")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'arch')
0 files changed, 0 insertions, 0 deletions