backport ipv6 security fix to 2.4 (#4245)
[openwrt/openwrt.git] / target / linux / generic-2.4 / patches / 900-CVE-2008-2136.patch
1 Backport of:
2
3 From: David S. Miller <davem@davemloft.net>
4 Date: Fri, 9 May 2008 06:40:26 +0000 (-0700)
5 Subject: sit: Add missing kfree_skb() on pskb_may_pull() failure.
6 X-Git-Tag: v2.6.26-rc2~19^2
7 X-Git-Url: http://git.kernel.org/?p=linux%2Fkernel%2Fgit%2Ftorvalds%2Flinux-2.6.git;a=commitdiff_plain;h=36ca34cc3b8335eb1fe8bd9a1d0a2592980c3f02
8
9 sit: Add missing kfree_skb() on pskb_may_pull() failure.
10
11 Noticed by Paul Marks <paul@pmarks.net>.
12
13 Signed-off-by: David S. Miller <davem@davemloft.net>
14 --- a/net/ipv6/sit.c
15 +++ b/net/ipv6/sit.c
16 @@ -410,9 +410,9 @@ int ipip6_rcv(struct sk_buff *skb)
17 }
18
19 icmp_send(skb, ICMP_DEST_UNREACH, ICMP_PROT_UNREACH, 0);
20 - kfree_skb(skb);
21 read_unlock(&ipip6_lock);
22 out:
23 + kfree_skb(skb);
24 return 0;
25 }
26