commit | eda814b97dfb8d9f4808eb2f65af9bd3705c4cae | [log] [tgz] |
---|---|---|
author | Alaa Hleihel <alaa@mellanox.com> | Wed Aug 19 18:24:10 2020 +0300 |
committer | David S. Miller <davem@davemloft.net> | Thu Aug 20 16:39:31 2020 -0700 |
tree | caac1541309a67e607993592661a6ee2838ea7d5 | |
parent | ab921f3cdbec01c68705a7ade8bec628d541fc2b [diff] |
net/sched: act_ct: Fix skb double-free in tcf_ct_handle_fragments() error flow tcf_ct_handle_fragments() shouldn't free the skb when ip_defrag() call fails. Otherwise, we will cause a double-free bug. In such cases, just return the error to the caller. Fixes: b57dc7c13ea9 ("net/sched: Introduce action ct") Signed-off-by: Alaa Hleihel <alaa@mellanox.com> Reviewed-by: Roi Dayan <roid@mellanox.com> Signed-off-by: David S. Miller <davem@davemloft.net>