diff options
| author | Pekka Enberg <penberg@cs.helsinki.fi> | 2008-07-27 02:49:33 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2008-07-27 02:49:33 +0200 |
| commit | 93bc4e89c260d91576840c4881d1066d84ccd422 (patch) | |
| tree | 456176a054fc9a3fed18ac6ce50c7a34a86c5808 /drivers/scsi/aacraid | |
| parent | netfilter: arptables in netns for real (diff) | |
| download | linux-93bc4e89c260d91576840c4881d1066d84ccd422.tar.xz linux-93bc4e89c260d91576840c4881d1066d84ccd422.zip | |
netfilter: fix double-free and use-after free
As suggested by Patrick McHardy, introduce a __krealloc() that doesn't
free the original buffer to fix a double-free and use-after-free bug
introduced by me in netfilter that uses RCU.
Reported-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pekka Enberg <penberg@cs.helsinki.fi>
Tested-by: Dieter Ries <clip2@gmx.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/scsi/aacraid')
0 files changed, 0 insertions, 0 deletions