diff options
author | Mohamed Ghannam <simo.ghannam@gmail.com> | 2017-12-05 20:58:35 +0000 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2018-02-17 13:21:13 +0100 |
commit | 7e2fb808d3c7c52f88ebc670949dbf1bae48f2a2 (patch) | |
tree | fc3f1cf583fc3866c18dba04b226b7fab49d09c9 /drivers | |
parent | a384e5437f705972d2884cea17b931c1a2cd3277 (diff) |
dccp: CVE-2017-8824: use-after-free in DCCP code
commit 69c64866ce072dea1d1e59a0d61e0f66c0dffb76 upstream.
Whenever the sock object is in DCCP_CLOSED state,
dccp_disconnect() must free dccps_hc_tx_ccid and
dccps_hc_rx_ccid and set to NULL.
Signed-off-by: Mohamed Ghannam <simo.ghannam@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers')
0 files changed, 0 insertions, 0 deletions